feat(P2): Nova rebrand — code/env-vars/consumer-path (REQ-158/159/160)

core/env.py dual-read helper (D-108); 21 ACDL_*→NOVA_* env vars migrated
across core/scripts/adapters/tests/workflows + .env/.env.secrets (key
rename, values stay). G-106 binding: run_platform.sh:288-289 +
regression_verify.py:309-312 dual-read (NOVA first, ACDL fallback).
G-108 binding: Gitea NOVA_* secrets created via API + workflow secrets:
refs updated (deploy.yml + modules-lifecycle.yml, .gitea + .github).
acdl_tagging.py→nova_tagging.py (D-109 warn mode, nova:* enforced).
.acdl/→.nova/ consumer path (resolver + deploy workflow + schema +
tests + docs). Test fixtures updated; pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 2
milestone: v1.15
status: execute
---/ci---

scripts/run_ci.sh

@@ -45,11 +45,12 @@ python3 -m py_compile \
   core/confidence_signal.py \
   core/outbox_writer.py \
   core/output_publisher.py \
+  core/env.py \
   core/contract_resolver.py \
   core/lambda/contract_ingestor.py \
   adapters/terraform/adapter.py \
   adapters/terraform/policy/checkov_adapter.py \
-  adapters/terraform/policy/custom_rules/acdl_tagging.py \
+  adapters/terraform/policy/custom_rules/nova_tagging.py \
   adapters/wiz/wiz_adapter.py \
   adapters/kyverno/kyverno_adapter.py \
   scripts/push_consumer_image.py \