Rename all 9 Rust crates from navigator-* to openshell-* to align
with the project rename to OpenShell. This is a comprehensive rename
touching ~1400 references across ~220 files:
- Crate directories and Cargo.toml names/deps
- Proto files (navigator.proto -> openshell.proto), packages, service name
- All Rust source imports (navigator_ -> openshell_) and string literals
- OPA Rego policy package name
- Python proto files and all SDK/e2e imports
- Dockerfiles, CI workflows, build scripts, task files
- Agent skills, documentation, and agent memory files
- Filesystem paths, CLI flags, K8s resource names, TLS cert subjects,
HTTP headers, gRPC paths
Binary names updated: navigator-server -> openshell-server,
navigator-sandbox -> openshell-sandbox (CLI was already openshell).
The S3 bucket navigator-pypi-artifacts is flagged with a TODO comment
as it requires external coordination to rename.
## Summary
- add a Docker-based macOS arm64 wheel build path so darwin wheels can be produced from Linux CI hosts
- wire macOS wheel builds into release publish workflows (`publish:main` and `publish:tag`) alongside existing Linux wheel builds
- mirror `crazymax/osxcross:latest` into `$CI_REGISTRY_IMAGE/third_party/osxcross:latest` and use that mirrored image in CI publish jobs
## Scope Notes
- this MR focuses on shipping reliable macOS wheel build support first
- temporary MR-only smoke-job wiring was removed after validation so the branch reflects final intended CI behavior
- broader cache optimization work is tracked separately in issue #43
## Test Plan
- run `mise run pre-commit`
- validate `.gitlab-ci.yml` with `uv run --with pyyaml python -c 'import yaml, pathlib; yaml.safe_load(pathlib.Path(".gitlab-ci.yml").read_text())'`