Rename mesh-control -> mesh-controller, substrate -> foundation

One name per thing, per the HQ glossary: the module/container/image/binary/repo
becomes mesh-controller, the seat the-controller, and the store+broker pair the
foundation (embedded base bundles, default template and example lock renamed with
their go:embed directives). No behaviour change — a pure vocabulary rename.

Claude-Session: https://claude.ai/code/session_01D6qtiYU3P9jk3pnAXyAFyx

scenarios/catalogue-apps.yml

@@ -1,6 +1,6 @@
 # One machine that becomes a mesh and is then assigned a SECOND wave of modules at once — the ones
 # converted this session (novox/hq ADR 0039/0048/0052): mongodb, unifi and marrytts, with postgres
-# carried along as a known-good control. This is catalogue-small's sibling: same first-node substrate,
+# carried along as a known-good control. This is catalogue-small's sibling: same first-node foundation,
 # same one-push co-residence, a different (and heavier) set of modules.
 #
 # The four exercise the three converted shapes:
@@ -14,7 +14,7 @@
 # None of the four share a directory, so the shared-workspace refusal (novox/hq 04-ISSUES/012) does
 # not bite; that class stays for a later bed.
 #
-#   MESH_LAB_HOST_BINARY=.../mesh-host   MESH_LAB_BUNDLE=.../examples/substrate-first-node.lock
+#   MESH_LAB_HOST_BINARY=.../mesh-host   MESH_LAB_BUNDLE=.../examples/foundation-first-node.lock
 #   scripts/build-module-runtime.sh {mongodb,unifi,postgres} build the runtime images into the local
 #   daemon (mongodb carries mongosh; unifi and postgres carry their CLIs). The service images
 #   (mongo, unifi-controller, marytts, postgres) must be in the local daemon to be stocked.
@@ -31,13 +31,13 @@ machines:
     egress: true
     inbound: allow
     # Sized up past catalogue-small's 6GiB: this wave carries two heavy JVM/embedded-DB service
-    # containers (the UniFi controller and MaryTTS) on top of the substrate, mongodb, postgres and
+    # containers (the UniFi controller and MaryTTS) on top of the foundation, mongodb, postgres and
     # three node runtimes — a dozen containers, two of them memory-hungry at startup.
     memory: 8GiB
     cpus: 4
 
 images:
-  - mesh-control:development
+  - mesh-controller:development
   # The runtimes built by scripts/build-module-runtime.sh and stocked here. marrytts needs none.
   - mesh-runtime-mongodb:development
   - mesh-runtime-unifi:development