Rename Castle -> Wild PC across the repo

Repo-side rename only (Phases 1-3 of the migration plan); the live box
(~/.castle, systemd units, /data/castle, domains) is a separate cutover.

- Slug `castle` -> `wildpc`: CLI command, module names (wildpc_core/cli/api),
  dist names, entry point `wildpc = wildpc_cli.main:main`.
- Identifiers: CastleConfig/NATSClient/DirError/MDNS -> Wildpc*.
- Env/constants: CASTLE_* -> WILDPC_*; ~/.castle -> ~/.wildpc, castle.yaml ->
  wildpc.yaml, /data/castle -> /data/wildpc.
- Systemd UNIT_PREFIX castle- -> wildpc-; own programs castle-api/gateway/etc.
- Display prose "Castle" -> "Wild PC" in docs, agent-guide files, README, frontend.
- Package dirs and bootstrap yaml renamed via git mv; lockfiles regenerated;
  redundant nested uv.lock files dropped (workspace root lock is authoritative).

Tests: core 273, cli 47, wildpc-api 120 all pass. Frontend type-checks + builds.
Fixed a stale test fixture (secret_env_path kind arg) broken pre-rename.

wildpc-api/tests/test_mesh_wire.py

@@ -0,0 +1,122 @@
+"""Tests for the transport-agnostic mesh wire format (registry (de)serialization)."""
+
+import json
+
+from wildpc_core.registry import Deployment, NodeConfig, NodeRegistry
+
+from wildpc_api.mesh_wire import json_to_registry, registry_to_json
+
+
+def _make_registry() -> NodeRegistry:
+    return NodeRegistry(
+        node=NodeConfig(
+            hostname="tower", wildpc_root="/data/repos/wildpc", gateway_port=9000
+        ),
+        deployed={
+            "my-svc": Deployment(
+                manager="systemd",
+                launcher="python",
+                run_cmd=["uv", "run", "my-svc"],
+                env={"PORT": "9001", "SECRET_KEY": "super-secret"},
+                description="My service",
+                name="my-svc",
+                kind="service",
+                stack="python-fastapi",
+                port=9001,
+                health_path="/health",
+                subdomain="my-svc",
+                managed=True,
+            ),
+            "my-job": Deployment(
+                manager="systemd",
+                launcher="command",
+                run_cmd=["my-job"],
+                name="my-job",
+                kind="job",
+                stack="python-cli",
+                schedule="0 2 * * *",
+            ),
+        },
+    )
+
+
+class TestRegistrySerialization:
+    """Round-trip serialization of NodeRegistry to/from JSON."""
+
+    def test_round_trip(self) -> None:
+        original = _make_registry()
+        json_str = registry_to_json(original)
+        restored = json_to_registry(json_str)
+
+        assert restored.node.hostname == "tower"
+        assert restored.node.gateway_port == 9000
+
+    def test_deployed_components_preserved(self) -> None:
+        original = _make_registry()
+        restored = json_to_registry(registry_to_json(original))
+
+        svc = restored.get("service", "my-svc")
+        assert svc is not None
+        assert svc.manager == "systemd"
+        assert svc.launcher == "python"
+        assert svc.port == 9001
+        assert svc.health_path == "/health"
+        assert svc.subdomain == "my-svc"
+        assert svc.managed is True
+        assert svc.kind == "service"
+        assert svc.stack == "python-fastapi"
+
+    def test_job_fields_preserved(self) -> None:
+        original = _make_registry()
+        restored = json_to_registry(registry_to_json(original))
+
+        job = restored.get("job", "my-job")
+        assert job is not None
+        assert job.launcher == "command"
+        assert job.schedule == "0 2 * * *"
+        assert job.kind == "job"
+        assert job.stack == "python-cli"
+
+    def test_optional_fields_omitted(self) -> None:
+        """Fields like port, health_path are None when not set."""
+        reg = NodeRegistry(
+            node=NodeConfig(hostname="minimal"),
+            deployed={
+                "bare": Deployment(
+                    manager="systemd", launcher="command", run_cmd=["bare"], name="bare"
+                ),
+            },
+        )
+        restored = json_to_registry(registry_to_json(reg))
+        bare = restored.get("service", "bare")
+        assert bare.port is None
+        assert bare.health_path is None
+        assert bare.subdomain is None
+        assert bare.schedule is None
+        assert bare.managed is False
+
+    def test_node_role_preserved(self) -> None:
+        reg = NodeRegistry(
+            node=NodeConfig(hostname="civil", role="authority"), deployed={}
+        )
+        restored = json_to_registry(registry_to_json(reg))
+        assert restored.node.role == "authority"
+
+    def test_node_role_defaults_follower(self) -> None:
+        reg = NodeRegistry(node=NodeConfig(hostname="n"), deployed={})
+        restored = json_to_registry(registry_to_json(reg))
+        assert restored.node.role == "follower"
+
+    def test_no_secrets_in_payload(self) -> None:
+        """env vars, run_cmd, and wildpc_root must never appear on the wire."""
+        original = _make_registry()
+        json_str = registry_to_json(original)
+        data = json.loads(json_str)
+
+        # No wildpc_root in node
+        assert "wildpc_root" not in data["node"]
+
+        # No env or run_cmd in any component
+        for name, comp in data["deployed"].items():
+            assert "env" not in comp, f"{name} has env in payload"
+            assert "run_cmd" not in comp, f"{name} has run_cmd in payload"