refactor(harness): renaming prodotto tht (Onda -1)

Thoth (tht) è il prodotto, PSD è il cliente. Nessun riferimento al contesto
clinico nel codice.

Rinomine:
- comando+package nsp→tht (dir nsp/→tht/, 46 import, pyproject entry point)
- gate nsp-gate.js→tht-gate.js (+ rewrite token, relayIfNspFails→relayIfThtFails)
- workspace chirone.{example,test}.yaml→tht.{example,test}.yaml (generici)
- env THOTH_→THT_ (19 var) + NSP_ stragglers (NSP_HARNESS_ROOT, NSP_SESSION)
- commenti/docstring chirone/psdwp3/policlinico neutralizzati ('the reference
  implementation', 'the DWH')

Aggiunto [tool.setuptools.packages.find] include=['tht*'] (necessario: l'auto-
discovery rompeva con tht/ + workspaces/ come top-level multipli).

.env operatore aggiornato in-place (prefissi THT_, valori preservati, gitignored).

Verifica: pytest 109 passed, npm test 14 pass, tht phase meta --json OK, zero
residui nsp/THOTH_/NSP_/chirone nel package.

harness/tests/test_rest_client.py

@@ -2,13 +2,13 @@
 
 Verifies the ported RestClient: each rpc carries the X-API-Key header, the right
 payload, base_url slash handling, and HTTP/network errors surface as RestError.
-Ported (renamed psdwp3->nsp) from ChironeWp3/tests/test_rest_client.py.
+Ported (renamed psdwp3->tht) from ChironeWp3/tests/test_rest_client.py.
 """
 import pytest
 import requests
 
-from nsp.config import RestConfig
-from nsp.rest.client import RestClient, RestError
+from tht.config import RestConfig
+from tht.rest.client import RestClient, RestError
 
 
 class FakeResponse:
@@ -39,7 +39,7 @@ def _capture(monkeypatch, response):
                       "timeout": timeout, "verify": verify})
         return response
 
-    monkeypatch.setattr("nsp.rest.client.requests.post", fake_post)
+    monkeypatch.setattr("tht.rest.client.requests.post", fake_post)
     return calls
 
 
@@ -104,7 +104,7 @@ def test_network_error_actionable(monkeypatch):
     def boom(*a, **k):
         raise requests.ConnectionError("refused")
 
-    monkeypatch.setattr("nsp.rest.client.requests.post", boom)
+    monkeypatch.setattr("tht.rest.client.requests.post", boom)
     with pytest.raises(RestError, match="raggiungibile"):
         _client().ping()