FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory

- module path renamed (no external importers); golangci local-prefixes
- ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION replaces FLEX_AUTH_RUN_TOPAZ_INTEGRATION
- README title and identity paragraph reflect the landed renames
- docs/runtime-rename-inventory.md: per-consumer references by kind and order
- chart name, image package and /opt paths deliberately left for T05

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc

README.md

@@ -1,14 +1,16 @@
-# flex-auth
+# access-engine
 
 Policy-as-code authorization registry and control plane for NetKingdom-aligned
 systems.
 
-The live Forge and State Hub coordinate is still `flex-auth` (repository UUID
-`fda8ad85-a7d7-4055-8f21-902a533e59df`, Forge ID `42`). `FLEX-WP-0020` will
-rename that coordinate to `access-engine` and keep the Go module, binary,
-`FLEX_AUTH_*` variables, Helm releases, container package
-`coulomb/flex-auth`, and policy/API vocabulary unchanged. Work-record
-frontmatter stays `repo: flex-auth` until State Hub rebind. Planned clone:
+The Forge and State Hub coordinate is `access-engine` (`FLEX-WP-0020`;
+repository UUID `fda8ad85-a7d7-4055-8f21-902a533e59df`, Forge ID `42`; hub alias
+`flex-auth`). The binary is `access-engine` (`FLEX-DEC-2026-020`; `flex-auth`
+is now only a stub that prints the rename), and the Go module is
+`github.com/netkingdom/access-engine`. The runtime still uses `flex-auth`: the
+namespace, Helm releases, Services, caller audience and container package
+`coulomb/flex-auth`. `FLEX-WP-0036` moves those to new pins that run alongside
+the old ones while consumers switch. Clone:
 `https://forgejo.coulomb.social/coulomb/access-engine.git`.
 
 Start with [INTENT.md](INTENT.md) for the project boundary and direction.