Four more of the catalogue: registry, redis, umami, grafana

Converted from the arrangement being replaced, in its shapes rather
than theirs.

The registry is the manifest the lab already proved, promoted: names
its image by digest and is never built (04-ISSUES/029), provides the
artifact store, claims it once per machine.

Redis is the third provision after a database and a bucket, and the
first whose tenancy is a pattern in a shared keyspace rather than a
namespace something else enforces. Its provisioner mirrors the postgres
one's contract line for line — the manifest, the sealed per-consumer
files, the mark, the withdrawal of orphans — and speaks RESP directly:
five commands are needed, and a client library large enough to hide
them would be most of the program's size. A prefix Redis would read as
a pattern is refused, because the grant must mean what the manifest
said; grants are persisted with ACL SAVE, or said loudly, because a
cache that forgets its tenants on restart reports success until then.

Umami asks the mesh for its database and a generated app secret, and
carries no state of its own — the arrangement being replaced ran a
bundled second postgres beside it. Grafana keeps its dashboards in a
declared directory with the image's own owner. Both listen on 3000, as
does the forge — which is the mesh's port assignment earning its keep.

Traefik is deliberately not converted: the mesh's route provider is
mesh-route-proxy, which speaks route grants natively, and a traefik
that consumed them would be an adapter nobody has written pretending
to be a conversion.

All images pinned by real digests, resolved on this workstation today.

examples/redis-provisioner/naming_test.go

@@ -0,0 +1,18 @@
+package main
+
+import "testing"
+
+// The grant must mean what it says: a prefix Redis would read as a pattern grants keyspace nobody
+// saw in the manifest.
+func TestAPrefixThatIsAPatternIsRefused(t *testing.T) {
+	for _, bad := range []string{"", "pho*", "a?b", "x[yz]", "a b", "brace{s}"} {
+		if err := usablePrefix(bad); err == nil {
+			t.Errorf("%q was accepted, and would match more keyspace than it names", bad)
+		}
+	}
+	for _, fine := range []string{"photos", "mesh_laptop_realapp", "a-b.c_d"} {
+		if err := usablePrefix(fine); err != nil {
+			t.Errorf("%q was refused and names exactly itself: %v", fine, err)
+		}
+	}
+}