docs: correct stale product facts (arkivplan, architecture, agents, self-hosting, extensions, database map) (#1931)

Every statement was verified against the code on main before editing; the
docs had drifted from the product in ways a customer or agent would act on.

- public/docs/arkivplan-mall.md: product named erp-base; magic-link login;
  BAS 2025/2026; eu-central/eu-west region; US subprocessors for AI. Now
  Accounted, e-mail + password + TOTP (BankID optional), BAS 2026,
  eu-north-1 Stockholm, Bedrock in EU with Resend as the only US
  subprocessor; adds rättelselogg, Peppol inbound, skattekonto imports and
  the säkerhetsbackup ZIP to the räkenskapsinformation tables.
- ARCHITECTURE.md: adds the inline-rättelse correction path, OAuth 2.1 and
  lazy MCP auth, accounted-mcp and claude-plugin, 150+ tools.
- AGENTS.md: defers to CLAUDE.md instead of a drifted copy; keeps the
  Codex-only constraints with the Supabase project name fixed (erp-base).
- README.md: drops LangChain/OpenAI (not dependencies), Node 20/22 facts,
  150+ tools, adds betalfil, Peppol, skattekonto and the Claude plugin.
- docs/PEPPOL_FOUNDATION.md: the two sentences denying network delivery
  and inbound support now describe the live Qvalia path.
- docs/SELF-HOSTING.md, docs/DOCKER.md: clone URLs and directory names,
  Sentry DSNs are not read by the app, image pinning uses the 7-char SHA
  tags the workflow actually publishes (no semver tag has been cut).
- docs/EXTENSIONS.md: replaces the fictional sector tree with the 19 real
  extensions/general directories; lib/reports/sru-encoding.ts.
- .claude/rules/database.md: 680+ migrations, ~170 live tables, adds the
  tables and RPCs that matter since July, drops sandbox_users.

Co-authored-by: Jakob Wennberg <311770904+jakobwennberg-oss@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

docs/DOCKER.md

@@ -17,15 +17,15 @@ You do **not** need Node.js, npm, or anything else installed locally. The pre-bu
 mkdir Accounted && cd Accounted
 
 # Compose file + env template
-curl -fsSLO https://raw.githubusercontent.com/gnubok/gnubok/main/docker-compose.yml
-curl -fsSLO https://raw.githubusercontent.com/gnubok/gnubok/main/.env.docker.example
+curl -fsSLO https://raw.githubusercontent.com/erp-mafia/accounted/main/docker-compose.yml
+curl -fsSLO https://raw.githubusercontent.com/erp-mafia/accounted/main/.env.docker.example
 
 # Cron sidecar (Dockerfile + schedule)
 mkdir -p docker
 curl -fsSL -o docker/cron.Dockerfile \
-  https://raw.githubusercontent.com/gnubok/gnubok/main/docker/cron.Dockerfile
+  https://raw.githubusercontent.com/erp-mafia/accounted/main/docker/cron.Dockerfile
 curl -fsSL -o docker/crontab.self-hosted \
-  https://raw.githubusercontent.com/gnubok/gnubok/main/docker/crontab.self-hosted
+  https://raw.githubusercontent.com/erp-mafia/accounted/main/docker/crontab.self-hosted
 ```
 
 ### 2. Configure your environment
@@ -146,10 +146,10 @@ NEXT_PUBLIC_APP_URL=https://gnubok.example.com
 ### 3. Download the overlay + Caddyfile
 
 ```bash
-curl -fsSLO https://raw.githubusercontent.com/gnubok/gnubok/main/docker-compose.caddy.yml
+curl -fsSLO https://raw.githubusercontent.com/erp-mafia/accounted/main/docker-compose.caddy.yml
 mkdir -p docker
 curl -fsSL -o docker/Caddyfile \
-  https://raw.githubusercontent.com/gnubok/gnubok/main/docker/Caddyfile
+  https://raw.githubusercontent.com/erp-mafia/accounted/main/docker/Caddyfile
 ```
 
 ### 4. Start with the overlay
@@ -216,19 +216,21 @@ No env vars needed: always available.
 
 ## Updating
 
-The default `IMAGE_TAG=latest` follows `main` and updates on every `docker compose pull`. For production, **pin to a specific release** so updates are deliberate:
+The default `IMAGE_TAG=latest` follows `main` and updates on every `docker compose pull`. For production, **pin to a specific build** so updates are deliberate. Every merge to `main` publishes the image under two tags: `latest` and the bare 7-character commit SHA (for example `3e4b5dd`), so a pin looks like:
 
 ```env
 # .env
-IMAGE_TAG=1.2.3
+IMAGE_TAG=3e4b5dd
 ```
 
-Browse available tags at https://github.com/erp-mafia/gnubok/pkgs/container/gnubok. For maximum integrity, pin by digest:
+Browse available tags at https://github.com/erp-mafia/accounted/pkgs/container/gnubok (the image name keeps the historical `gnubok` package name on purpose). For maximum integrity, pin by digest; the digest is printed in the `docker-publish` workflow run and by `docker buildx imagetools inspect ghcr.io/erp-mafia/gnubok:<sha>`:
 
 ```env
-IMAGE_TAG=1.2.3@sha256:abcdef...
+IMAGE_TAG=3e4b5dd@sha256:abcdef...
 ```
 
+Semver tags (`1.2.3`, `1.2`, `1`) are published only when a `v*.*.*` git tag is cut. No such tag exists yet, so until the first tagged release the commit SHA is the only immutable pin.
+
 Apply updates:
 
 ```bash
@@ -246,8 +248,8 @@ If you prefer to build locally instead of pulling the pre-built image:
 
 ```bash
 # Clone the repo
-git clone https://github.com/gnubok/gnubok.git
-cd Accounted
+git clone https://github.com/erp-mafia/accounted.git
+cd accounted
 cp .env.docker.example .env
 # Fill in .env