docs: purge stale lamassu naming; fix the hal-check skill's provenance boundary

- @lamassu/clink import examples → @bitSpire/clink, the package's real name.
- machine-installation.md: the service user is `bitspire`, not `lamassu`
  (renamed in configuration.nix long ago; the doc never followed).
- README: clone aiolabs/bitspire, not lamassu-next; the fleet sentence
  claiming batm3/douro run `main` against Lightning.Pub was stale.
- nostr-check skill: table headers say bitSpire.
- hal-check skill: the boundary is c0b69d1, not v8.1.5 (CLAUDE.md corrected
  this 2026-07-04; the skill kept asserting the wrong tag), and the
  "forbidden operations" now reflect the recorded permission —
  reference over port, name the source commit — plus a rule born of the
  GTQ window: no value table without a test over it.

Deliberately kept: every `aiolabs/lamassu-next#NN` issue citation, the
provenance sections, "Ported from lamassu-machine" driver headers, and
the hardware names "Lamassu Sintra/Tejo/Douro" — those are the machines.

docs/clink-protocol.md

@@ -68,7 +68,7 @@ noffer1<bech32-encoded-data>
 The ATM wants to receive payment from a customer:
 
 ```typescript
-import { encodeNoffer } from '@lamassu/clink'
+import { encodeNoffer } from '@bitSpire/clink'
 
 // ATM creates a noffer for receiving payment
 const noffer = encodeNoffer({
@@ -134,7 +134,7 @@ ndebit1<bech32-encoded-data>
 The ATM wants to pay the customer (customer inserted cash, wants Bitcoin):
 
 ```typescript
-import { encodeNdebit, formatNdebitUri } from '@lamassu/clink'
+import { encodeNdebit, formatNdebitUri } from '@bitSpire/clink'
 
 // ATM creates an ndebit for the customer to authorize withdrawal
 const ndebit = encodeNdebit({
@@ -438,14 +438,14 @@ import {
   CLINKClient,
   createOfferSuccess,
   createOfferError,
-} from '@lamassu/clink'
+} from '@bitSpire/clink'
 ```
 
 ### Reference Implementation
 
 - [CLINK Protocol Spec](https://github.com/shocknet/clink)
 - [Lightning.Pub](https://github.com/shocknet/Lightning.Pub)
-- [@lamassu/clink](../packages/clink/) - TypeScript implementation
+- [@bitSpire/clink](../packages/clink/) - TypeScript implementation
 
 ## Related NIPs