feat(P2): Nova rebrand — code/env-vars/consumer-path (REQ-158/159/160)

core/env.py dual-read helper (D-108); 21 ACDL_*→NOVA_* env vars migrated
across core/scripts/adapters/tests/workflows + .env/.env.secrets (key
rename, values stay). G-106 binding: run_platform.sh:288-289 +
regression_verify.py:309-312 dual-read (NOVA first, ACDL fallback).
G-108 binding: Gitea NOVA_* secrets created via API + workflow secrets:
refs updated (deploy.yml + modules-lifecycle.yml, .gitea + .github).
acdl_tagging.py→nova_tagging.py (D-109 warn mode, nova:* enforced).
.acdl/→.nova/ consumer path (resolver + deploy workflow + schema +
tests + docs). Test fixtures updated; pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 2
milestone: v1.15
status: execute
---/ci---

scripts/run_lifecycle_test.sh

@@ -10,8 +10,9 @@
 # The CI VPC is short-lived (created/destroyed by the pipeline), separate
 # from the long-lived platform VPC.
 #
-# Lifecycle mode (REQ-134): the ACDL_LIFECYCLE_MODE env var selects the
-# tier. Default "plan" runs `run_platform.sh --plan-only` (fast, no AWS
+# Lifecycle mode (REQ-134): the NOVA_LIFECYCLE_MODE env var selects the
+# tier (dual-read NOVA_* preferred, ACDL_* fallback until P5). Default
+# "plan" runs `run_platform.sh --plan-only` (fast, no AWS
 # mutation, validates the contract->resolver->adapter->plan chain for
 # every module). Set to "full" to run the real `--apply` (terraform apply
 # against live AWS). The CI variable is passed via the workflow input
@@ -25,7 +26,8 @@ EXAMPLE="$2"  # simple or complex
 CI_VPC_OUTPUTS="${3:-}"
 
 # Lifecycle mode: "plan" (default, fast) or "full" (real apply against AWS).
-LIFECYCLE_MODE="${ACDL_LIFECYCLE_MODE:-plan}"
+# Dual-read: NOVA_* preferred, ACDL_* fallback (removed in P5).
+LIFECYCLE_MODE="${NOVA_LIFECYCLE_MODE:-${ACDL_LIFECYCLE_MODE:-plan}}"
 
 CONTRACT="modules/l1/${MODULE}/examples/${EXAMPLE}.yml"