rename: IAMROOT → SKELETONKEY across the entire project

Breaking change. Tool name, binary name, function/type names,
constant names, env vars, header guards, file paths, and GitHub
repo URL all rebrand IAMROOT → SKELETONKEY.

Changes:
  - All "IAMROOT" → "SKELETONKEY" (constants, env vars, enum
    values, docs, comments)
  - All "iamroot" → "skeletonkey" (functions, types, paths, CLI)
  - iamroot.c → skeletonkey.c
  - modules/*/iamroot_modules.{c,h} → modules/*/skeletonkey_modules.{c,h}
  - tools/iamroot-fleet-scan.sh → tools/skeletonkey-fleet-scan.sh
  - Binary "iamroot" → "skeletonkey"
  - GitHub URL KaraZajac/IAMROOT → KaraZajac/SKELETONKEY
  - .gitignore now expects build output named "skeletonkey"
  - /tmp/iamroot-* tmpfiles → /tmp/skeletonkey-*
  - Env vars IAMROOT_MODPROBE_PATH etc. → SKELETONKEY_*

New ASCII skeleton-key banner (horizontal key icon + ANSI Shadow
SKELETONKEY block letters) replaces the IAMROOT banner in
skeletonkey.c and README.md.

VERSION: 0.3.1 → 0.4.0 (breaking).

Build clean on Debian 6.12.86. `skeletonkey --version` → 0.4.0.
All 24 modules still register; no functional code changes — pure
rename + banner refresh.

.github/workflows/build.yml

@@ -37,22 +37,22 @@ jobs:
             make
           fi
 
-      - name: sanity — iamroot --version
-        run: ./iamroot --version
+      - name: sanity — skeletonkey --version
+        run: ./skeletonkey --version
 
-      - name: sanity — iamroot --list
-        run: ./iamroot --list
+      - name: sanity — skeletonkey --list
+        run: ./skeletonkey --list
 
-      - name: sanity — iamroot --scan (no exploit; just detect)
-        run: ./iamroot --scan --no-color || true
+      - name: sanity — skeletonkey --scan (no exploit; just detect)
+        run: ./skeletonkey --scan --no-color || true
         # exit code may be nonzero (vulnerable host = exit 2, missing
         # precond = exit 4) — that's diagnostic data, not CI failure
 
       - name: sanity — --detect-rules auditd
-        run: ./iamroot --detect-rules --format=auditd | head -50
+        run: ./skeletonkey --detect-rules --format=auditd | head -50
 
       - name: sanity — --detect-rules sigma
-        run: ./iamroot --detect-rules --format=sigma | head -50
+        run: ./skeletonkey --detect-rules --format=sigma | head -50
 
   # Static build job: ensures the project links cleanly when -static is
   # requested. Useful for deployment to minimal containers / fleet scans
@@ -75,7 +75,7 @@ jobs:
         # gate the merge on it. Migrate to musl-gcc when we want a
         # truly portable static binary.
         continue-on-error: true
-        run: make static && ls -la iamroot
+        run: make static && ls -la skeletonkey
 
   # Phase 4 followup (placeholder): kernel-VM matrix. Each entry runs
   # the binary against a VM running a specific (vulnerable or patched)

.github/workflows/release.yml

@@ -7,7 +7,7 @@ name: release
 # Maintainer flow:
 #   git tag v0.1.0
 #   git push origin v0.1.0
-#   → CI builds + publishes release with iamroot-x86_64 + iamroot-arm64
+#   → CI builds + publishes release with skeletonkey-x86_64 + skeletonkey-arm64
 
 on:
   push:
@@ -44,20 +44,20 @@ jobs:
           CC: ${{ matrix.cc }}
         run: |
           make
-          file iamroot
-          ls -la iamroot
+          file skeletonkey
+          ls -la skeletonkey
 
       - name: rename + checksum
         run: |
-          mv iamroot iamroot-${{ matrix.target }}
-          sha256sum iamroot-${{ matrix.target }} > iamroot-${{ matrix.target }}.sha256
+          mv skeletonkey skeletonkey-${{ matrix.target }}
+          sha256sum skeletonkey-${{ matrix.target }} > skeletonkey-${{ matrix.target }}.sha256
 
       - uses: actions/upload-artifact@v4
         with:
-          name: iamroot-${{ matrix.target }}
+          name: skeletonkey-${{ matrix.target }}
           path: |
-            iamroot-${{ matrix.target }}
-            iamroot-${{ matrix.target }}.sha256
+            skeletonkey-${{ matrix.target }}
+            skeletonkey-${{ matrix.target }}.sha256
 
   release:
     needs: build
@@ -72,7 +72,7 @@ jobs:
       - name: flatten artifacts
         run: |
           find dist -type f -exec mv {} . \;
-          ls -la iamroot-*
+          ls -la skeletonkey-*
 
       - name: collect release notes
         id: notes
@@ -81,16 +81,16 @@ jobs:
           echo "tag=$tag" >> "$GITHUB_OUTPUT"
           # Pull the latest entry from CVES.md / ROADMAP.md for the body
           {
-            echo "## IAMROOT $tag"
+            echo "## SKELETONKEY $tag"
             echo
             echo "Pre-built binaries for x86_64 and arm64. Checksums alongside."
             echo
             echo "### Install"
             echo
             echo '```bash'
-            echo "curl -sSLfo /tmp/iamroot https://github.com/${GITHUB_REPOSITORY}/releases/download/${tag}/iamroot-\$(uname -m | sed s/aarch64/arm64/)"
-            echo "chmod +x /tmp/iamroot && sudo mv /tmp/iamroot /usr/local/bin/iamroot"
-            echo "iamroot --version"
+            echo "curl -sSLfo /tmp/skeletonkey https://github.com/${GITHUB_REPOSITORY}/releases/download/${tag}/skeletonkey-\$(uname -m | sed s/aarch64/arm64/)"
+            echo "chmod +x /tmp/skeletonkey && sudo mv /tmp/skeletonkey /usr/local/bin/skeletonkey"
+            echo "skeletonkey --version"
             echo '```'
             echo
             echo "Or one-shot via the install script:"
@@ -109,12 +109,12 @@ jobs:
         uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ steps.notes.outputs.tag }}
-          name: IAMROOT ${{ steps.notes.outputs.tag }}
+          name: SKELETONKEY ${{ steps.notes.outputs.tag }}
           body_path: release-notes.md
           files: |
-            iamroot-x86_64
-            iamroot-x86_64.sha256
-            iamroot-arm64
-            iamroot-arm64.sha256
+            skeletonkey-x86_64
+            skeletonkey-x86_64.sha256
+            skeletonkey-arm64
+            skeletonkey-arm64.sha256
             install.sh
           fail_on_unmatched_files: false   # install.sh may not exist at first tag