🏗️ fermata: redaction-first security model, unified .botsecrets config

Realign fermata around redaction (PostToolUse) as the primary security
layer, with access control (PreToolUse) as supplementary write/bash
protection. Remove botignore.toml — policy rules now live in .botsecrets
[policy] section. Add fermata.toml as an alias for .botsecrets.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

tests/core_project.rs

@@ -3,12 +3,11 @@ use std::fs;
 use tempfile::TempDir;
 
 #[test]
-fn finds_botignore_toml_first() {
+fn finds_fermata_toml() {
     let tmp = TempDir::new().unwrap();
     let root = tmp.path();
     fs::create_dir_all(root.join("sub/deep")).unwrap();
-    fs::write(root.join("botignore.toml"), "").unwrap();
-    fs::write(root.join(".botignore.toml"), "").unwrap();
+    fs::write(root.join("fermata.toml"), "").unwrap();
     fs::create_dir_all(root.join(".git")).unwrap();
 
     let target = root.join("sub/deep/file.rs");
@@ -19,11 +18,11 @@ fn finds_botignore_toml_first() {
 }
 
 #[test]
-fn finds_dot_botignore_toml() {
+fn finds_botsecrets() {
     let tmp = TempDir::new().unwrap();
     let root = tmp.path();
     fs::create_dir_all(root.join("sub")).unwrap();
-    fs::write(root.join(".botignore.toml"), "").unwrap();
+    fs::write(root.join(".botsecrets"), "").unwrap();
 
     let target = root.join("sub/file.rs");
     fs::write(&target, "").unwrap();
@@ -110,7 +109,7 @@ fn walks_up_from_file_path_not_cwd() {
     let tmp = TempDir::new().unwrap();
     let root = tmp.path();
     fs::create_dir_all(root.join("a/b/c")).unwrap();
-    fs::write(root.join("a/botignore.toml"), "").unwrap();
+    fs::write(root.join("a/fermata.toml"), "").unwrap();
 
     let target = root.join("a/b/c/file.rs");
     fs::write(&target, "").unwrap();