refactor: remove all uncaged codename references

- Remove UNCAGED_CAS_DIR and UNCAGED_WORKFLOW_STORAGE_ROOT env var fallbacks
- Tests updated to use OCAS_DIR / UWF_STORAGE_ROOT
- All docs, READMEs, scripts, workflows, skills updated
- Only symlink migration code retains .uncaged paths (functional requirement)

Closes #12 (Phase 5 complete)

workflows/normalize-bun-monorepo.yaml

@@ -742,7 +742,7 @@ roles:
       6. Private packages (server, frontend, tools) must have `"private": true` and can skip publishConfig/files
       7. Each package should have a `"scripts"` section with at least `"test"` if tests exist
       8. Workspace dependencies should use `"workspace:^"` protocol, not version numbers
-         - Check: `grep -r '"@uncaged/' packages/*/package.json | grep -v 'workspace:'`
+         - Check: `grep -r '"@united-workforce/' packages/*/package.json | grep -v 'workspace:'`
 
       ## Verification
       You MUST actually run each command below and include real output. Do NOT guess or fabricate results.
@@ -764,7 +764,7 @@ roles:
         "
       done
       # No hardcoded workspace deps
-      ! grep -r '"@uncaged/' packages/*/package.json | grep -v 'workspace:' | grep -v node_modules
+      ! grep -r '"@united-workforce/' packages/*/package.json | grep -v 'workspace:' | grep -v node_modules
       ```
 
       Post-condition: Verification script shows OK for all non-private packages, no hardcoded workspace versions.
@@ -849,4 +849,4 @@ roles:
               type: string
     capabilities:
       - workflow-config
-description: Normalize an existing project to @uncaged bun monorepo conventions. Supports both TypeScript and JS/MJS projects. Each role handles one configuration layer. All roles allow fail.
+description: Normalize an existing project to @united-workforce bun monorepo conventions. Supports both TypeScript and JS/MJS projects. Each role handles one configuration layer. All roles allow fail.

workflows/solve-issue.yaml

@@ -148,7 +148,7 @@ roles:
 
       - Crockford Base32 log tags (8-char, unique per call site)
 
-      - No `console.log` in production code (use createLogger from @uncaged/util)
+      - No `console.log` in production code (use createLogger from @united-workforce/util)
 
       - No dynamic imports in production code
 
@@ -247,7 +247,7 @@ roles:
       \ create a new branch.\n1. Stage all changes: `git add -A`\n2. Commit with a descriptive message referencing the issue: `git commit -m \"type: description\\n\\nFixes #N\"`\n3. Push the branch: `git\
       \ push -u origin <branch-name>`\n4. **Verify push succeeded** — run `git ls-remote origin <branch-name>` and confirm it prints a commit hash.\n   - If no output or push failed: capture the error, mark hook_failed\n\
       5. Create a PR using the Gitea API (do NOT use `tea pr create` — it fails in worktrees):\n   ```bash\n   GITEA_TOKEN=$(cfg get GITEA_TOKEN)\n   curl -s -X POST -H \"Authorization: token $GITEA_TOKEN\" -H \"Content-Type: application/json\" \\\n\
-      \     \"https://git.shazhou.work/api/v1/repos/<owner>/<repo>/pulls\" \\\n     -d '{\"title\":\"...\",\"body\":\"...\",\"head\":\"<branch>\",\"base\":\"main\"}'\n   ```\n   - The repo remote (owner/repo format, e.g. \"uncaged/workflow\") is given in your task prompt — use it directly.\n\
+      \     \"https://git.shazhou.work/api/v1/repos/<owner>/<repo>/pulls\" \\\n     -d '{\"title\":\"...\",\"body\":\"...\",\"head\":\"<branch>\",\"base\":\"main\"}'\n   ```\n   - The repo remote (owner/repo format, e.g. \"shazhou/united-workforce\") is given in your task prompt — use it directly.\n\
       \   - PR body must include: What / Why / Changes / Ref sections, with `Fixes #N` in Ref\n6. **Verify PR was created** — parse the curl response JSON: it must contain a `\"number\"` field. Print the PR URL.\n\
       \   - If curl returns an error or no number field: capture the response, mark hook_failed\n7. After PR creation, clean up the worktree:\n   - cd to the repo root (parent of .worktrees)\n   - `git worktree remove <worktree-path>`"
     output: Include PR URL on success or error log on failure. Set $status to committed (with prUrl) or hook_failed (with error).