Rebrand: TeamClaw -> Clawmates (clawmates.work)

Full-depth rename per the approved plan; the 'claw' product vocabulary
(claws, /claws routes, clawId, Claw Chat) stays — it is now the brand.

- Display brand: Clawmates (manifest, titles, hero, login/rail logo
  'clawmates'); default host app.clawmates.work; registry
  ghcr.io/clawmates
- Crates tc-* -> cm-* (16 crates + all imports); binaries
  clawmates-server/broker/bundler; images clawmates/*; env prefix
  CLAWMATES_* (+ CM_TEST_DATABASE_URL / CM_LIVE_LLM); config
  clawmates.toml; helm chart deploy/helm/clawmates with clawmates-*
  resources; db names clawmates*; sockets /run/clawmates; cookie
  cm_session; kind cluster clawmates-test; seccomp node profile
  clawmates-agent-profile.json
- All 9 Playwright brand assertions updated in lockstep; historical
  spec document left untouched as the only remaining 'TeamClaw'
- Local env migrated: dev pg clawmates-dev-pg/clawmates_dev, shared
  test server clawmates-test-pg, kind cluster recreated with image +
  profile, compose images rebuilt under clawmates/*

Verified end to end: 161 Rust + 68 frontend tests, 29 Playwright
journeys, 4 live kind tests, helm/install/LOC/placeholder gates, and
the clean-room install rehearsal serving the clawmates login page from
a signed bundle of the rebuilt images.

Co-Authored-By: Claude Fable 5 <[email protected]>

crates/cm-api/src/routes/billing.rs

@@ -0,0 +1,54 @@
+use axum::extract::State;
+use axum::Json;
+use cm_billing::BillingError;
+use cm_db::repo::audit::Actor;
+use serde::Deserialize;
+use serde_json::{json, Value};
+
+use crate::{ApiError, AppState, Authed};
+
+#[derive(Deserialize)]
+pub struct RedeemRequest {
+    code: String,
+}
+
+/// POST /api/credits/redeem — promo redemption (§8.4), once per code.
+pub async fn redeem(
+    State(state): State<AppState>,
+    Authed(user): Authed,
+    Json(body): Json<RedeemRequest>,
+) -> Result<Json<Value>, ApiError> {
+    let granted = cm_billing::redeem_promo(&state.pool, user.workspace_id, &body.code)
+        .await
+        .map_err(|e| match e {
+            BillingError::PromoUnavailable => ApiError::Conflict,
+            BillingError::Db(_) => ApiError::Internal,
+        })?;
+    cm_db::repo::audit::append(
+        &state.pool,
+        user.workspace_id,
+        Actor::User(user.user_id),
+        "credits.promo_redeemed",
+        "promo",
+        &body.code,
+        json!({"granted": granted}),
+    )
+    .await?;
+    Ok(Json(json!({ "granted": granted })))
+}
+
+/// GET /api/team/usage — the trailing-7-day meter (§8.4).
+pub async fn usage(
+    State(state): State<AppState>,
+    Authed(user): Authed,
+) -> Result<Json<Value>, ApiError> {
+    let (tokens_in, tokens_out, credits) =
+        cm_billing::usage_last_7_days(&state.pool, user.workspace_id)
+            .await
+            .map_err(|_| ApiError::Internal)?;
+    Ok(Json(json!({
+        "tokens_in": tokens_in,
+        "tokens_out": tokens_out,
+        "credits": credits,
+    })))
+}