Rename the mesh's seats to mesh-*, keeping their interfaces

novox/hq ADR 0118: the prefix is the reservation rule, so a module
declaring any mesh-* name is refused and there is no reserved-names list to
drift. Ten seats renamed in the table, the manifests that claim them, the
controller's own shipped manifests, and the tests.

Not the migration 0118 expected: a holding is derived at resolution from
manifests and never stored, so nothing recorded points at an old name. A
kept rename table tells a manifest written against one what it became —
kept rather than retired, because a module lives in its own repository and
may be registered long after the catalogue stopped using it.

**A seat is not the interface it delivers.** The git seat became mesh-git
and the git provision did not; likewise the package registry. A blanket
replace renamed both, and the failure read "the package registry is served
on <nil>", which does not say "you renamed an interface". A test now pins
every seat against what it delivers, and that neither name is also the
other.

internal/catalogue/foundation_manifests_test.go

@@ -124,7 +124,7 @@ func TestTheForgesPortIsGivenLikeAnyOtherProvidersPort(t *testing.T) {
 // unused.
 func TestTheBuilderRequiresTheRegistryTheNpmSeatDelivers(t *testing.T) {
 	builder := catalogueManifest(t, "builder")
-	seat, _ := SeatNamed("npm-package-registry")
+	seat, _ := SeatNamed("mesh-npm-package-registry")
 	var requires bool
 	for _, r := range builder.Requires {
 		requires = requires || r == seat.Delivers
@@ -150,7 +150,7 @@ func TestTheForgeHoldsTheNpmAndGitSeats(t *testing.T) {
 	for _, c := range forge.Claims {
 		holds[c.Name] = true
 	}
-	for _, seat := range []string{"npm-package-registry", "git"} {
+	for _, seat := range []string{"mesh-npm-package-registry", "mesh-git"} {
 		if !holds[seat] {
 			t.Errorf("gitea does not claim the %s seat: %+v", seat, forge.Claims)
 		}