FLEX-WP-0036: Go module is github.com/netkingdom/access-engine; T02 consumer inventory

- module path renamed (no external importers); golangci local-prefixes
- ACCESS_ENGINE_RUN_TOPAZ_INTEGRATION replaces FLEX_AUTH_RUN_TOPAZ_INTEGRATION
- README title and identity paragraph reflect the landed renames
- docs/runtime-rename-inventory.md: per-consumer references by kind and order
- chart name, image package and /opt paths deliberately left for T05

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 735967@bnt-lap001
Assistant-Session: 5971967f-77f8-4ced-9e02-c6ef67040ffc

cmd/access-engine/main.go

@@ -16,13 +16,13 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/internal/audit"
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	decisioncore "github.com/netkingdom/flex-auth/internal/decision"
-	"github.com/netkingdom/flex-auth/internal/emission"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/registry"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/audit"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	decisioncore "github.com/netkingdom/access-engine/internal/decision"
+	"github.com/netkingdom/access-engine/internal/emission"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/registry"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // version is set at build time via -ldflags "-X main.version=...".

cmd/access-engine/main_test.go

@@ -11,8 +11,8 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 func TestRunVersion(t *testing.T) {

cmd/access-engine/ops_warden_fetch_test.go

@@ -15,8 +15,8 @@ import (
 
 	"gopkg.in/yaml.v3"
 
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // The ops-warden secret-read pin (CUST-WP-0075, bug b792c5d0): warden's

cmd/access-engine/readback.go

@@ -9,11 +9,11 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/netkingdom/flex-auth/internal/audit"
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	"github.com/netkingdom/flex-auth/internal/policy"
-	"github.com/netkingdom/flex-auth/internal/readback"
-	"github.com/netkingdom/flex-auth/internal/registry"
+	"github.com/netkingdom/access-engine/internal/audit"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	"github.com/netkingdom/access-engine/internal/policy"
+	"github.com/netkingdom/access-engine/internal/readback"
+	"github.com/netkingdom/access-engine/internal/registry"
 )
 
 // readbackBinding is the caller-binding key the readback routes authorize

cmd/access-engine/readback_test.go

@@ -14,11 +14,11 @@ import (
 	"testing"
 	"time"
 
-	"github.com/netkingdom/flex-auth/internal/audit"
-	"github.com/netkingdom/flex-auth/internal/callerauth"
-	"github.com/netkingdom/flex-auth/internal/readback"
-	"github.com/netkingdom/flex-auth/internal/schemaguard"
-	"github.com/netkingdom/flex-auth/pkg/api"
+	"github.com/netkingdom/access-engine/internal/audit"
+	"github.com/netkingdom/access-engine/internal/callerauth"
+	"github.com/netkingdom/access-engine/internal/readback"
+	"github.com/netkingdom/access-engine/internal/schemaguard"
+	"github.com/netkingdom/access-engine/pkg/api"
 )
 
 // FLEX-WP-0035: application access readback.

cmd/flex-auth/main_test.go

@@ -9,12 +9,12 @@ import (
 
 // The retired binary must fail and name its replacement, whatever it is asked.
 func TestRetiredBinaryNamesReplacement(t *testing.T) {
-	if os.Getenv("FLEX_AUTH_STUB_CHILD") == "1" {
+	if os.Getenv("ACCESS_ENGINE_STUB_CHILD") == "1" {
 		main()
 		return
 	}
 	cmd := exec.Command(os.Args[0], "-test.run=TestRetiredBinaryNamesReplacement", "serve", "--addr", "x")
-	cmd.Env = append(os.Environ(), "FLEX_AUTH_STUB_CHILD=1")
+	cmd.Env = append(os.Environ(), "ACCESS_ENGINE_STUB_CHILD=1")
 	out, err := cmd.CombinedOutput()
 	exit, ok := err.(*exec.ExitError)
 	if !ok || exit.ExitCode() != 2 {