Rename the mesh's seats to mesh-*, keeping their interfaces

novox/hq ADR 0118: the prefix is the reservation rule, so a module
declaring any mesh-* name is refused and there is no reserved-names list to
drift. Ten seats renamed in the table, the manifests that claim them, the
controller's own shipped manifests, and the tests.

Not the migration 0118 expected: a holding is derived at resolution from
manifests and never stored, so nothing recorded points at an old name. A
kept rename table tells a manifest written against one what it became —
kept rather than retired, because a module lives in its own repository and
may be registered long after the catalogue stopped using it.

**A seat is not the interface it delivers.** The git seat became mesh-git
and the git provision did not; likewise the package registry. A blanket
replace renamed both, and the failure read "the package registry is served
on <nil>", which does not say "you renamed an interface". A test now pins
every seat against what it delivers, and that neither name is also the
other.

internal/catalogue/domain_test.go

@@ -17,7 +17,7 @@ func networkingShelf(extra ...Manifest) map[string]Manifest {
 		{Module: "networking", Requires: []string{"private-network", "name-resolution"}},
 		{Module: "mesh-wireguard", Computed: "mesh-wireguard",
 			Provides: Offers("private-network", "mesh-addressing"),
-			Claims:   []Claim{{Name: "the-private-network", Scope: ScopeNode}}},
+			Claims:   []Claim{{Name: "mesh-private-network", Scope: ScopeNode}}},
 		{Module: "mesh-names", Computed: "mesh-names",
 			Provides: Offers("name-resolution"), Requires: []string{"mesh-addressing"}},
 	}
@@ -44,7 +44,7 @@ func TestASecondVPNTurnsItIntoAChoice(t *testing.T) {
 	// back under another name.
 	_, err := Resolve(networkingShelf(
 		Manifest{Module: "tailscale", Provides: Offers("private-network"),
-			Claims: []Claim{{Name: "the-private-network", Scope: ScopeNode}}},
+			Claims: []Claim{{Name: "mesh-private-network", Scope: ScopeNode}}},
 	), []string{"networking"}, workstation(), World{})
 
 	if err == nil {
@@ -62,7 +62,7 @@ func TestChoosingIsAssigning(t *testing.T) {
 	got, err := Resolve(networkingShelf(
 		Manifest{Module: "tailscale",
 			Provides: Offers("private-network", "name-resolution"),
-			Claims:   []Claim{{Name: "the-private-network", Scope: ScopeNode}}},
+			Claims:   []Claim{{Name: "mesh-private-network", Scope: ScopeNode}}},
 	), []string{"networking", "tailscale"}, workstation(), World{})
 
 	if err != nil {
@@ -85,13 +85,13 @@ func TestChoosingOneVPNCannotDragTheOtherBackIn(t *testing.T) {
 	// machine could run two VPNs for two purposes — but being *the* one the mesh runs over is.
 	_, err := Resolve(networkingShelf(
 		Manifest{Module: "tailscale", Provides: Offers("private-network"),
-			Claims: []Claim{{Name: "the-private-network", Scope: ScopeNode}}},
+			Claims: []Claim{{Name: "mesh-private-network", Scope: ScopeNode}}},
 	), []string{"networking", "tailscale"}, workstation(), World{})
 
 	if err == nil {
 		t.Fatal("a machine was given two private networks without being told")
 	}
-	if !strings.Contains(err.Error(), "the-private-network") {
+	if !strings.Contains(err.Error(), "mesh-private-network") {
 		t.Fatalf("the refusal does not say what collided: %v", err)
 	}
 }