Rename the app from scopa to tavolo

The platform now hosts multiple card games, with scopone scientifico as
the first one. Rename the brand wherever it is not a game rule:

- move the Python package to server/src/tavolo and update imports
- rename the Postgres database/user, OIDC issuer path, client id and
  Redis key prefixes to tavolo (clean break: existing pgdata volumes and
  live games are not migrated)
- rename the Cargo package to tavolo-web and set the page title to Tavolo
- update docs and the Docker image path to woggioni/tavolo

The scopa game term (clearing the table) in the engine, state and web UI
is intentionally left untouched.

docker-compose.yml

@@ -2,15 +2,15 @@ services:
   postgres:
     image: postgres:18-alpine
     environment:
-      POSTGRES_DB: scopa
-      POSTGRES_USER: scopa
-      POSTGRES_PASSWORD: scopa
+      POSTGRES_DB: tavolo
+      POSTGRES_USER: tavolo
+      POSTGRES_PASSWORD: tavolo
     ports:
       - "5432:5432"
     volumes:
       - pgdata:/var/lib/postgresql
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U scopa"]
+      test: ["CMD-SHELL", "pg_isready -U tavolo"]
       interval: 5s
       timeout: 3s
       retries: 10
@@ -21,7 +21,7 @@ services:
   # The mock does not validate clients, so any client id/secret works.
   #
   # It listens on 8180 both inside and outside the network so the OIDC
-  # issuer URL (http://mockoauth:8180/scopa) is identical for
+  # issuer URL (http://mockoauth:8180/tavolo) is identical for
   # container-to-container calls and for browser redirects (via the
   # /etc/hosts entry documented in the README).
   mockoauth:
@@ -43,7 +43,7 @@ services:
       - mockoauth
     entrypoint: >
       /bin/sh -c "
-      until curl -sf http://mockoauth:8180/scopa/.well-known/openid-configuration > /dev/null; do
+      until curl -sf http://mockoauth:8180/tavolo/.well-known/openid-configuration > /dev/null; do
         echo 'waiting for mockoauth...'; sleep 2;
       done
       "
@@ -71,12 +71,12 @@ services:
     working_dir: /app
     command: ["aerich", "upgrade"]
     environment:
-      DATABASE_URL: postgres://scopa:scopa@postgres:5432/scopa
+      DATABASE_URL: postgres://tavolo:tavolo@postgres:5432/tavolo
     depends_on:
       postgres:
         condition: service_healthy
 
-  scopa:
+  tavolo:
     build:
       context: .
       dockerfile: server/Dockerfile
@@ -90,13 +90,13 @@ services:
       redis:
         condition: service_healthy
     environment:
-      DATABASE_URL: postgres://scopa:scopa@postgres:5432/scopa
+      DATABASE_URL: postgres://tavolo:tavolo@postgres:5432/tavolo
       # By default the app and browsers reach the mock IdP under the same
       # name (see README /etc/hosts note); override OIDC_ISSUER and
       # OIDC_REDIRECT_URI to use a real provider or a different host port.
-      OIDC_ISSUER: ${OIDC_ISSUER:-http://mockoauth:8180/scopa}
+      OIDC_ISSUER: ${OIDC_ISSUER:-http://mockoauth:8180/tavolo}
       # The mock OIDC server does not validate clients: any id/secret works.
-      OIDC_CLIENT_ID: scopa
+      OIDC_CLIENT_ID: tavolo
       OIDC_CLIENT_SECRET: ${OIDC_CLIENT_SECRET:-dev-secret}
       OIDC_REDIRECT_URI: ${OIDC_REDIRECT_URI:-http://localhost:8080/auth/callback}
       REDIS_URL: redis://redis:6379/0