feat: rename to BitGate and close the drop-in gap

Renames the project and makes it as easy to adopt as BitLogin, which was the
stated bar and which it did not previously meet.

Rename (ADR 0005): @nostr-governance/* -> @bitgate/*, governance-* elements ->
bitgate-*, createGovernanceRuntime -> createBitGate. "Governance" reads as DAO
voting to this audience and named a category rather than a product; BitGate
names the benefit and joins the bit- family that BitVid and BitRoad compose
with. Domain types keep their names — the product is BitGate, the subject
matter is still governance. The migration plan is left as written; this ADR
records the change rather than rewriting history.

Drop-in distribution (ADR 0006): adopting BitGate meant supplying a transport,
authoring a policy, and wiring every element in JavaScript. Now:

- createRelayTransport(urls) — WebSocket transport with reconnection, backoff,
  subscription replay, and cross-relay dedupe
- policy presets (social, commerce, admin-only) addressable by name; the engine
  still carries no thresholds of its own
- <bitgate-provider> — configuration in markup, with descendants finding the
  runtime through a bubbling context event rather than DOM walking, which
  breaks across shadow boundaries
- npm run build:widget — a self-contained dist/bitgate.js

That last one came from running it in a browser rather than from a test. Bare
specifiers resolve in Node and vitest but not in a browser, so the widget
source worked everywhere except a plain static page — the one place it exists
to serve. The bundle is not committed: consumers build from reviewed source.

Also found by running it: the provider's ready event fires during element
upgrade, before a page that defines elements after parsing can attach a
listener, so it now exposes `ready` as a promise too.

Four bugs fixed along the way, three found by new tests and one by the browser:
admin state stayed silent when a roster change altered capabilities but no
denials; the relay transport sent every subscription twice on connect; the
commerce preset computed a meaningless visibility verdict at checkout and could
hide a listing from its own seller; <bitgate-status> threw on an unusable
decision.

759 tests; lint, typecheck, and both builds clean.

packages/runtime/test/runtime.test.js

@@ -1,6 +1,6 @@
 import { describe, expect, it, vi } from "vitest";
 
-import { createPolicyDefinition } from "@nostr-governance/core";
+import { createPolicyDefinition } from "@bitgate/core";
 import {
   CANONICAL_KIND,
   MUTE_LIST_KIND,
@@ -8,9 +8,9 @@ import {
   canonicalIdentifier,
   encodeContribution,
   encodeRoles,
-} from "@nostr-governance/nostr";
+} from "@bitgate/nostr";
 
-import { GovernanceRuntime, chunk, createGovernanceRuntime } from "../src/runtime.js";
+import { GovernanceRuntime, chunk, createBitGate } from "../src/runtime.js";
 import { createMemoryTransport, storageKey } from "../src/interfaces.js";
 
 const ROOT = "a1".repeat(32);
@@ -37,8 +37,8 @@ const POLICY = createPolicyDefinition({
 });
 
 /**
- * @param {Partial<import('@nostr-governance/nostr').NostrEvent>} parts
- * @returns {import('@nostr-governance/nostr').NostrEvent}
+ * @param {Partial<import('@bitgate/nostr').NostrEvent>} parts
+ * @returns {import('@bitgate/nostr').NostrEvent}
  */
 const event = (parts) => ({
   id: "00".repeat(32),
@@ -57,7 +57,7 @@ const rolesEvent = () =>
     ...encodeRoles({ actors: { [MODERATOR]: ["moderator"] }, protectedActors: [] }, "app"),
   });
 
-/** @param {import('@nostr-governance/core').GovernanceTarget} [target] */
+/** @param {import('@bitgate/core').GovernanceTarget} [target] */
 const denyEvent = (target = { type: "user", pubkey: CREATOR }) =>
   event({
     id: "bb".repeat(32),
@@ -66,7 +66,7 @@ const denyEvent = (target = { type: "user", pubkey: CREATOR }) =>
 
 function makeRuntime(events = []) {
   const transport = createMemoryTransport(events);
-  const runtime = createGovernanceRuntime({
+  const runtime = createBitGate({
     applicationId: "test-app",
     namespace: "app",
     transport,
@@ -100,7 +100,7 @@ describe("storageKey", () => {
         schemaVersion: "v1",
         scope: "admin",
       }),
-    ).toBe("nostr-governance:bitroad:bitroad:abcd:v1:admin");
+    ).toBe("bitgate:bitroad:bitroad:abcd:v1:admin");
   });
 
   it("appends the viewer for viewer-scoped state", () => {
@@ -260,7 +260,7 @@ describe("loadAdministrativeState", () => {
   it("can restrict the query to known authors", async () => {
     const transport = createMemoryTransport([rolesEvent(), denyEvent()]);
     const listSpy = vi.spyOn(transport, "list");
-    const runtime = createGovernanceRuntime({
+    const runtime = createBitGate({
       applicationId: "a",
       namespace: "app",
       transport,
@@ -277,7 +277,7 @@ describe("active targets and subscriptions", () => {
   it("chunks report subscriptions rather than opening one per target", () => {
     const transport = createMemoryTransport();
     const subscribeSpy = vi.spyOn(transport, "subscribe");
-    const runtime = createGovernanceRuntime({
+    const runtime = createBitGate({
       applicationId: "a",
       namespace: "app",
       transport,
@@ -299,7 +299,7 @@ describe("active targets and subscriptions", () => {
   it("separates event and user filters", () => {
     const transport = createMemoryTransport();
     const subscribeSpy = vi.spyOn(transport, "subscribe");
-    const runtime = createGovernanceRuntime({
+    const runtime = createBitGate({
       applicationId: "a",
       namespace: "app",
       transport,
@@ -411,7 +411,7 @@ describe("evaluation", () => {
     runtime.ingestEvent(rolesEvent());
     runtime.ingestEvent(denyEvent());
 
-    /** @type {import('@nostr-governance/core').GovernanceTarget} */
+    /** @type {import('@bitgate/core').GovernanceTarget} */
     const target = { type: "user", pubkey: CREATOR };
     const many = runtime.evaluateMany([target], { profile: "feed" });
     expect(many.get(`user:${CREATOR}`)).toEqual(runtime.evaluate(target, { profile: "feed" }));