chore(rebrand): finish codewhale release surfaces

Dockerfile

@@ -1,17 +1,16 @@
 # syntax=docker/dockerfile:1
-# DeepSeek-TUI multi-arch Docker image (#501)
+# Codewhale multi-arch Docker image (#501)
 #
-# Build:  docker buildx build --platform linux/amd64,linux/arm64 -t deepseek-tui:latest .
-# Run:    docker run --rm -it -e DEEPSEEK_API_KEY -v deepseek-tui-home:/home/deepseek/.deepseek deepseek-tui
+# Build:  docker buildx build --platform linux/amd64,linux/arm64 -t codewhale:latest .
+# Run:    docker run --rm -it -e DEEPSEEK_API_KEY -v codewhale-home:/home/codewhale/.deepseek codewhale
 #
-# The image ships both binaries (deepseek dispatcher + deepseek-tui runtime)
-# in a minimal runtime layer. No MCP servers or heavy toolchains are included
-# — keep it slim.
+# The image ships the canonical binaries (`codewhale`, `codewhale-tui`) plus
+# the legacy `deepseek` / `deepseek-tui` shims in a minimal runtime layer.
 #
 # API keys MUST be passed at runtime (never baked into the image):
-#   docker run --rm -it -e DEEPSEEK_API_KEY deepseek-tui
+#   docker run --rm -it -e DEEPSEEK_API_KEY codewhale
 # Or mount an env file:
-#   docker run --rm -it --env-file .env deepseek-tui
+#   docker run --rm -it --env-file .env codewhale
 
 ARG RUST_VERSION=1.88
 
@@ -56,11 +55,14 @@ COPY . .
 
 # Build both binaries for the target platform.  --locked ensures
 # reproducible builds from the committed lockfile.
-RUN --mount=type=cache,id=deepseek-tui-target-${TARGETARCH},target=/build/target,sharing=locked \
-    --mount=type=cache,id=deepseek-tui-cargo-registry-${TARGETARCH},target=/usr/local/cargo/registry,sharing=locked \
-    --mount=type=cache,id=deepseek-tui-cargo-git-${TARGETARCH},target=/usr/local/cargo/git,sharing=locked \
+RUN --mount=type=cache,id=codewhale-target-${TARGETARCH},target=/build/target,sharing=locked \
+    --mount=type=cache,id=codewhale-cargo-registry-${TARGETARCH},target=/usr/local/cargo/registry,sharing=locked \
+    --mount=type=cache,id=codewhale-cargo-git-${TARGETARCH},target=/usr/local/cargo/git,sharing=locked \
     cargo build --release --locked --target "$(cat /rust-target)" \
+      -p codewhale-cli -p codewhale-tui \
     && mkdir -p /out \
+    && cp target/$(cat /rust-target)/release/codewhale /out/ \
+    && cp target/$(cat /rust-target)/release/codewhale-tui /out/ \
     && cp target/$(cat /rust-target)/release/deepseek /out/ \
     && cp target/$(cat /rust-target)/release/deepseek-tui /out/
 
@@ -73,17 +75,19 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     && rm -rf /var/lib/apt/lists/*
 
 # Non-root user with explicit UID/GID for filesystem ownership clarity.
-RUN groupadd --gid 1000 deepseek \
-    && useradd --create-home --shell /bin/bash --uid 1000 --gid 1000 deepseek \
-    && install -d -m 0700 -o deepseek -g deepseek /home/deepseek/.deepseek
-USER deepseek
-WORKDIR /home/deepseek
+RUN groupadd --gid 1000 codewhale \
+    && useradd --create-home --shell /bin/bash --uid 1000 --gid 1000 codewhale \
+    && install -d -m 0700 -o codewhale -g codewhale /home/codewhale/.deepseek
+USER codewhale
+WORKDIR /home/codewhale
 
-COPY --from=builder --chown=deepseek:deepseek /out/deepseek /usr/local/bin/deepseek
-COPY --from=builder --chown=deepseek:deepseek /out/deepseek-tui /usr/local/bin/deepseek-tui
+COPY --from=builder --chown=codewhale:codewhale /out/codewhale /usr/local/bin/codewhale
+COPY --from=builder --chown=codewhale:codewhale /out/codewhale-tui /usr/local/bin/codewhale-tui
+COPY --from=builder --chown=codewhale:codewhale /out/deepseek /usr/local/bin/deepseek
+COPY --from=builder --chown=codewhale:codewhale /out/deepseek-tui /usr/local/bin/deepseek-tui
 
 # The dispatcher expects to find its companion binary next to it.
 # Both are in /usr/local/bin — no further path setup needed.
 
-ENTRYPOINT ["deepseek"]
+ENTRYPOINT ["codewhale"]
 CMD []