chore: rebrand references to Signetry/*

.github/workflows/cla.yml

@@ -45,10 +45,10 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           path-to-signatures: "signatures/cla.json"
-          path-to-document: "https://github.com/bkd-dotcom/umbra-github-app/blob/main/CLA.md"
+          path-to-document: "https://github.com/Signetry/github-app/blob/main/CLA.md"
           branch: "cla-signatures"
           allowlist: "dependabot[bot],bkd-dotcom"
-          custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/bkd-dotcom/umbra-github-app/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:"
+          custom-notsigned-prcomment: "Thanks for your contribution! Before it can be merged, please read the **[Contributor License Agreement](https://github.com/Signetry/github-app/blob/main/CLA.md)** — Umbra is **All Rights Reserved**, and by signing you assign copyright/ownership of your contribution to the Owner (you may not use, sell, or commercialize it yourself). To agree, reply with exactly:"
           custom-pr-sign-comment: "I have read the CLA Document and I hereby sign the CLA"
           custom-allsigned-prcomment: "All contributors have signed the CLA. ✅"
           lock-pullrequest-aftermerge: false

.github/workflows/reviewer.yml

@@ -3,7 +3,7 @@ name: Reviewer
 # Advisory PR review (umbra-reviewer): surfaces architecture + security issues
 # and posts one recommendation comment. Advisory only — it never merges and never
 # fails the PR. Changes to security-sensitive surfaces (workflows, packaging) are
-# escalated to a human. See https://github.com/bkd-dotcom/umbra-reviewer
+# escalated to a human. See https://github.com/Signetry/reviewer
 on:
   pull_request:
 
@@ -24,7 +24,7 @@ jobs:
           python-version: "3.12"
       - name: Install umbra-reviewer
         # source-available (All Rights Reserved); install from source, not PyPI.
-        run: pip install "umbra-reviewer @ git+https://github.com/bkd-dotcom/umbra-reviewer@v0.1.1"
+        run: pip install "umbra-reviewer @ git+https://github.com/Signetry/reviewer@v0.1.1"
       - name: Compute the PR diff
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}

README.md

@@ -10,8 +10,8 @@ Install once on an account or org (pick repos in GitHub's own UI) and every new
 pull request gets one advisory **Admission Decision** comment — verdict, reasons,
 and a link to the signed receipt. **Comment-only; Umbra never merges.**
 
-Part of the [Umbra platform](https://github.com/bkd-dotcom/umbra-umbrella).
-Governance logic lives in [umbra-core](https://github.com/bkd-dotcom/umbra-core);
+Part of the [Umbra platform](https://github.com/Signetry/signetry).
+Governance logic lives in [umbra-core](https://github.com/Signetry/core);
 the App is served by the hosted [`umbra`](https://github.com/bkd-dotcom/umbra)
 service. This repository is the App's **public home**: its manifest, setup docs,
 and configuration — not a second copy of the governance pipeline.
@@ -45,7 +45,7 @@ Full operator setup (secrets, Cloud Run): [SETUP.md](SETUP.md).
 - Governance is `umbra-core`; this repo carries no policy logic.
 
 See [SECURITY.md](SECURITY.md) ·
-[umbrella overview](https://github.com/bkd-dotcom/umbra-umbrella).
+[umbrella overview](https://github.com/Signetry/signetry).
 
 ## License
 

SECURITY.md

@@ -1,14 +1,14 @@
 # Security policy
 
 The Umbra GitHub App is served by the hosted [`umbra`](https://github.com/bkd-dotcom/umbra)
-service and governed by [umbra-core](https://github.com/bkd-dotcom/umbra-core).
+service and governed by [umbra-core](https://github.com/Signetry/core).
 This repo holds the App's manifest and setup docs only.
 
 ## Reporting
 
 Open a private security advisory on the relevant repository (`umbra` for the hosted
 webhook/token handling, `umbra-core` for governance), or use the umbrella contact:
-<https://github.com/bkd-dotcom/umbra-umbrella>. Do not open a public issue for an
+<https://github.com/Signetry/signetry>. Do not open a public issue for an
 unpatched vulnerability.
 
 ## Guarantees