v0.3.0 — rebrand: PXEForge → OpenPXE, Gated → Queued Deployment

Full rename to match the openpxe.com brand. The product now reads as a
polished open-source project rather than a personal-tool nickname:
the anvil/forge metaphor is gone, replaced with the rainbow-horizon
brand mark from the marketing site.

## Naming changes

**PXEForge → OpenPXE** everywhere it's user-visible or developer-
facing:
- All 8 crate package names (`pxeforge-*` → `openpxe-*`).
- The bin crate dir + binary (`crates/pxeforge` → `crates/openpxe`,
  `bin = "openpxe"`).
- Env vars: `PXEFORGE_*` → `OPENPXE_*` (no compat shim — pre-beta).
- Tracing targets: `pxeforge::*` → `openpxe::*`.
- Prometheus metrics: `pxeforge_*` → `openpxe_*` (pre-beta; nobody
  has dashboards on these yet).
- Container image: `gitea.milesward.dev/mward4/openpxe:0.3.0`.
- All in-tree paths: `/var/lib/openpxe/{isos,work,smb}`,
  `/usr/share/openpxe/ipxe`, `/etc/openpxe/...`.
- Unraid template renamed `pxeforge.xml` → `openpxe.xml`.
- README, NEXT_PHASE.md, architecture.md, comments, and the WebUI
  brand string.

**Gated Deployment → Queued Deployment** as the user-facing concept:
- `Settings::TimeoutAction::GatedDeployment` →
  `QueuedDeployment` (with `#[serde(alias = "gated_deployment")]`
  so v0.2.0 settings.json files keep deserializing).
- Rust types: `Gate` → `QueueEntry`, `GateQueue` → `DeploymentQueue`,
  `GateInner` → `QueueEntryInner`.
- File: `crates/core/src/gate.rs` → `crates/core/src/queue.rs`.
- HTTP routes: `/api/gate/*` → `/api/queue/*`. The JSON list key
  flipped from `"gates"` to `"entries"` to match.
- iPXE shortcut: `/boot/_gate.ipxe` → `/boot/_queue.ipxe`. The
  top-level menu's item id is now `queue` instead of `gate`.
- WebUI sidebar tab: "Forge Gate" → "Queue".
- Field on `AppState`: `gates` → `queue`.

## Brand assets

The anvil + forging-sparks logos are dropped:
- `logo.svg` is now a 24×24 medallion filled with the
  `rainbow-horizon` gradient from openpxe.com (sliding hue rotation
  via SMIL on the gradient stops, no JS needed).
- `anvil-forge.svg` renamed to `loader.svg` and rebuilt as a 64×64
  louder version of the same disc — used for page-load transitions
  and the imaging-progress widget. Adds a subtle scale pulse and a
  white inner-glow so it has dimensionality on either theme.

## CSS rename

- `.forge-progress` → `.queue-progress`
- `.forge-progress .anvil` → `.queue-progress .mark`
- `@keyframes forge-sheen` → `queue-sheen`
- `.loader .anvil` → `.loader .mark`
- "Heating the forge…" loader text → "Loading…"

The rest of the layout is untouched. Light/dark theme tokens and the
sidebar/topbar structure carry over from v0.2.0 unchanged — the
brief was "keeping the UI similar."

## Validation

- `cargo build --workspace` — clean.
- `cargo clippy --workspace --all-targets` — no warnings.
- `cargo test --workspace` — **66 tests passing**, same as v0.2.0.
- Local smoke run against the rebuilt release binary verifies:
  - `/boot.ipxe` emits `Queued Deployment` + `item queue` + chains
    `/boot/_queue.ipxe`
  - `/api/queue` returns `{count, entries}`
  - `/metrics` emits `openpxe_queue_count` (renamed)
  - `/assets/logo.svg` and `/assets/loader.svg` serve the new
    rainbow brand SVGs
  - `/api/status` reports version `0.3.0`

## Migration notes for operators on v0.2.0

- Container image path changed: pull
  `gitea.milesward.dev/mward4/openpxe:0.3.0` (not `pxeforge:`).
- Bind mounts: `/var/lib/openpxe/{isos,work,smb}` (not `pxeforge`).
  Move the host path or update the template.
- Env vars: replace `PXEFORGE_*` with `OPENPXE_*`. The Unraid
  template at `deploy/unraid/openpxe.xml` is already updated.
- `settings.json` carries over transparently — the
  `gated_deployment` value is accepted as an alias.
- HTTP API: any external scripts that hit `/api/gate/*` need to
  switch to `/api/queue/*`. The JSON envelope key is `entries`
  instead of `gates`.

crates/iso-store/src/introspect.rs

@@ -49,7 +49,7 @@ pub fn introspect(path: &Path) -> IntrospectionReport {
     };
 
     let Ok(mut f) = std::fs::File::open(path) else {
-        tracing::warn!(target: "pxeforge::iso", "cannot open ISO for introspection: {}", path.display());
+        tracing::warn!(target: "openpxe::iso", "cannot open ISO for introspection: {}", path.display());
         return report;
     };
 

crates/iso-store/src/nfs.rs

@@ -37,7 +37,7 @@
 use crate::introspect::{introspect, IntrospectionReport};
 use crate::store::{generate_boot_entries_for, slugify_str, IsoSource, IsoStore};
 use parking_lot::Mutex;
-use pxeforge_core::{Error, Result};
+use openpxe_core::{Error, Result};
 use serde::{Deserialize, Serialize};
 use std::collections::HashMap;
 use std::path::{Path, PathBuf};
@@ -76,7 +76,7 @@ pub struct NfsMount {
     pub export: String,
     pub version: NfsVersion,
     /// Read-only by default — most ISO libraries are. Operators that need
-    /// write can flip this off but PXEForge itself never writes.
+    /// write can flip this off but OpenPXE itself never writes.
     pub read_only: bool,
     /// Local mount point under `<work_dir>/nfs/`.
     pub local_path: PathBuf,
@@ -168,7 +168,7 @@ impl NfsManager {
             self.inner.lock().mounts.insert(m.id.clone(), m.clone());
             if let Err(e) = self.try_mount(&m.id).await {
                 tracing::warn!(
-                    target: "pxeforge::nfs",
+                    target: "openpxe::nfs",
                     id = %m.id, error = %e,
                     "could not remount NFS share on startup"
                 );
@@ -299,7 +299,7 @@ impl NfsManager {
         match output {
             Ok(out) if out.status.success() => {
                 tracing::info!(
-                    target: "pxeforge::nfs",
+                    target: "openpxe::nfs",
                     id = %id, server = %m.server, export = %m.export,
                     version = ?m.version,
                     "NFS mount succeeded"
@@ -315,13 +315,13 @@ impl NfsManager {
                     out.status.code().unwrap_or(-1),
                     String::from_utf8_lossy(&out.stderr).trim()
                 );
-                tracing::warn!(target: "pxeforge::nfs", id = %id, "{err}");
+                tracing::warn!(target: "openpxe::nfs", id = %id, "{err}");
                 self.update_status(id, false, Some(err.clone()), now);
                 Err(Error::Invalid(err))
             }
             Err(e) => {
                 let err = format!("could not exec /bin/mount: {e}");
-                tracing::error!(target: "pxeforge::nfs", id = %id, "{err}");
+                tracing::error!(target: "openpxe::nfs", id = %id, "{err}");
                 self.update_status(id, false, Some(err.clone()), now);
                 Err(Error::Invalid(err))
             }
@@ -442,7 +442,7 @@ impl NfsManager {
         let body = match serde_json::to_vec_pretty(&mounts) {
             Ok(b) => b,
             Err(e) => {
-                tracing::warn!(target: "pxeforge::nfs", "serialize NFS state: {e}");
+                tracing::warn!(target: "openpxe::nfs", "serialize NFS state: {e}");
                 return;
             }
         };
@@ -450,11 +450,11 @@ impl NfsManager {
             let _ = std::fs::create_dir_all(parent);
         }
         if let Err(e) = std::fs::write(&tmp, body) {
-            tracing::warn!(target: "pxeforge::nfs", "write NFS state tmp: {e}");
+            tracing::warn!(target: "openpxe::nfs", "write NFS state tmp: {e}");
             return;
         }
         if let Err(e) = std::fs::rename(&tmp, path) {
-            tracing::warn!(target: "pxeforge::nfs", "rename NFS state: {e}");
+            tracing::warn!(target: "openpxe::nfs", "rename NFS state: {e}");
         }
     }
 }

crates/iso-store/src/smb.rs

@@ -20,7 +20,7 @@
 //!   - SMB2 minimum (no SMB1 legacy, not needed for WinPE).
 //!   - Bound to 0.0.0.0:445; operator MUST put this on a trusted install
 //!     VLAN — guest SMB is not for the general internet.
-//!   - smbd runs as the same non-root uid as pxeforge (10001).
+//!   - smbd runs as the same non-root uid as openpxe (10001).
 //!   - If `smbd` isn't on PATH (e.g. lightweight container build without
 //!     Samba), we return `SmbState::SmbdMissing` and the UI surfaces the
 //!     gap. No panics, no retries, no silent failure.
@@ -100,7 +100,7 @@ impl SmbManager {
                 conf,
                 "\n[{name}]\n\
                  path = {}\n\
-                 comment = PXEForge Windows install media ({name})\n\
+                 comment = OpenPXE Windows install media ({name})\n\
                  read only = yes\n\
                  guest ok = yes\n\
                  guest only = yes\n\
@@ -152,7 +152,7 @@ impl SmbManager {
                 *g = Some(c);
                 let s = SmbState::Running { pid, shares };
                 *self.state.lock() = s.clone();
-                tracing::info!(target: "pxeforge::smb", pid, shares=?self.state.lock(), "smbd started");
+                tracing::info!(target: "openpxe::smb", pid, shares=?self.state.lock(), "smbd started");
                 s
             }
             Err(e) => {
@@ -248,7 +248,7 @@ pid directory = /tmp
 pub fn extract_windows_iso(iso_path: &Path, smb_dir: &Path, slug: &str) -> std::io::Result<PathBuf> {
     let target = smb_dir.join(slug);
     if target.join("sources").join("boot.wim").is_file() {
-        tracing::debug!(target: "pxeforge::smb", slug, "ISO already extracted, skipping");
+        tracing::debug!(target: "openpxe::smb", slug, "ISO already extracted, skipping");
         return Ok(target);
     }
     std::fs::create_dir_all(&target)?;
@@ -265,7 +265,7 @@ pub fn extract_windows_iso(iso_path: &Path, smb_dir: &Path, slug: &str) -> std::
             .output()?;
         if out.status.success() { return Ok(target); }
         tracing::warn!(
-            target: "pxeforge::smb",
+            target: "openpxe::smb",
             stderr=%String::from_utf8_lossy(&out.stderr),
             "7z extract failed, trying bsdtar"
         );
@@ -315,7 +315,7 @@ mod tests {
     fn start_without_smbd_reports_missing() {
         // Drop smbd from PATH for this test.
         let saved = std::env::var_os("PATH");
-        std::env::set_var("PATH", "/usr/nowhere-pxeforge-test");
+        std::env::set_var("PATH", "/usr/nowhere-openpxe-test");
         let dir = tempdir().unwrap();
         let m = SmbManager::new(dir.path().into());
         let st = m.start();

crates/iso-store/src/store.rs

@@ -4,7 +4,7 @@ use crate::entry::{BootEntry, BootKind, KernelArgs};
 use crate::introspect::{introspect, DistroFamily, IntrospectionReport};
 use bytes::Bytes;
 use parking_lot::RwLock;
-use pxeforge_core::{Error, Result};
+use openpxe_core::{Error, Result};
 use serde::{Deserialize, Serialize};
 use sha2::{Digest, Sha256};
 use std::collections::HashMap;

crates/iso-store/src/windows.rs

@@ -160,7 +160,7 @@ fn render_startnet(host: &str, share: &str) -> String {
     // Bootimus v0.1.58 lesson: surface `net use` errors instead of
     // tight-looping on a blind retry. We retry but log every miss.
     s.push_str("@echo off\r\n");
-    s.push_str("echo PXEForge WinPE bootstrap\r\n");
+    s.push_str("echo OpenPXE WinPE bootstrap\r\n");
     s.push_str("wpeinit\r\n");
     // v0.1.58: explicitly start Workstation before mapping the share —
     // `net use` otherwise lazily inits SMB-client and races wpeinit.