refactor(harness): renaming prodotto tht (Onda -1)

Thoth (tht) è il prodotto, PSD è il cliente. Nessun riferimento al contesto
clinico nel codice.

Rinomine:
- comando+package nsp→tht (dir nsp/→tht/, 46 import, pyproject entry point)
- gate nsp-gate.js→tht-gate.js (+ rewrite token, relayIfNspFails→relayIfThtFails)
- workspace chirone.{example,test}.yaml→tht.{example,test}.yaml (generici)
- env THOTH_→THT_ (19 var) + NSP_ stragglers (NSP_HARNESS_ROOT, NSP_SESSION)
- commenti/docstring chirone/psdwp3/policlinico neutralizzati ('the reference
  implementation', 'the DWH')

Aggiunto [tool.setuptools.packages.find] include=['tht*'] (necessario: l'auto-
discovery rompeva con tht/ + workspaces/ come top-level multipli).

.env operatore aggiornato in-place (prefissi THT_, valori preservati, gitignored).

Verifica: pytest 109 passed, npm test 14 pass, tht phase meta --json OK, zero
residui nsp/THOTH_/NSP_/chirone nel package.

harness/.env.example

@@ -1,38 +1,38 @@
 # ThothII profile: server (full rebuild) | workstation (read REST + optional upsert)
-THOTH_PROFILE=server
+THT_PROFILE=server
 
 # Workspace DB (relational, direct transport) — example: chirone
-THOTH_DB_HOST=
-THOTH_DB_PORT=5432
-THOTH_DB_NAME=
-THOTH_DB_USER=
-THOTH_DB_PASSWORD=
+THT_DB_HOST=
+THT_DB_PORT=5432
+THT_DB_NAME=
+THT_DB_USER=
+THT_DB_PASSWORD=
 
 # DWH via REST (richiesto se database.transport = rest)
-THOTH_DWH_REST_URL=https://supabase-aritmolab.policlinicosandonato.it/dwh/
-THOTH_DWH_API_KEY=
+THT_DWH_REST_URL=https://supabase-aritmolab.policlinicosandonato.it/dwh/
+THT_DWH_API_KEY=
 
 # Evidence source root (cartella curata a mano con le evidence)
-THOTH_DOCS_ROOT=
+THT_DOCS_ROOT=
 
 # Vector REST — LETTURA (rpc search_similar) sul Supabase remoto
-THOTH_VEC_REST_URL=https://host/vector/v1/
-THOTH_VEC_API_KEY=
+THT_VEC_REST_URL=https://host/vector/v1/
+THT_VEC_API_KEY=
 
 # Vector REST — SCRITTURA controllata (upsert only) da client remoti autorizzati
 # Path DEDICATO: /vector/write/v1/ (NON /vector/v1/). Le due chiavi valgono su path
 # separati: la writer key su /vector/v1/ -> 401, e viceversa. Solo postazioni che indicizzano.
-THOTH_VEC_WRITE_REST_URL=https://host/vector/write/v1/
-THOTH_VEC_WRITE_API_KEY=
+THT_VEC_WRITE_REST_URL=https://host/vector/write/v1/
+THT_VEC_WRITE_API_KEY=
 
 # Vector direct loading (server-only)
-THOTH_VEC_HOST=localhost
-THOTH_VEC_PORT=5438
-THOTH_VEC_USER=postgres
-THOTH_VEC_PASSWORD=
+THT_VEC_HOST=localhost
+THT_VEC_PORT=5438
+THT_VEC_USER=postgres
+THT_VEC_PASSWORD=
 
 # Embeddings (Ollama)
-THOTH_OLLAMA_URL=http://localhost:11434
+THT_OLLAMA_URL=http://localhost:11434
 
 # TLS (optional, internal CA)
-THOTH_SSL_CA=
+THT_SSL_CA=