rename: IAMROOT → SKELETONKEY across the entire project

Breaking change. Tool name, binary name, function/type names,
constant names, env vars, header guards, file paths, and GitHub
repo URL all rebrand IAMROOT → SKELETONKEY.

Changes:
  - All "IAMROOT" → "SKELETONKEY" (constants, env vars, enum
    values, docs, comments)
  - All "iamroot" → "skeletonkey" (functions, types, paths, CLI)
  - iamroot.c → skeletonkey.c
  - modules/*/iamroot_modules.{c,h} → modules/*/skeletonkey_modules.{c,h}
  - tools/iamroot-fleet-scan.sh → tools/skeletonkey-fleet-scan.sh
  - Binary "iamroot" → "skeletonkey"
  - GitHub URL KaraZajac/IAMROOT → KaraZajac/SKELETONKEY
  - .gitignore now expects build output named "skeletonkey"
  - /tmp/iamroot-* tmpfiles → /tmp/skeletonkey-*
  - Env vars IAMROOT_MODPROBE_PATH etc. → SKELETONKEY_*

New ASCII skeleton-key banner (horizontal key icon + ANSI Shadow
SKELETONKEY block letters) replaces the IAMROOT banner in
skeletonkey.c and README.md.

VERSION: 0.3.1 → 0.4.0 (breaking).

Build clean on Debian 6.12.86. `skeletonkey --version` → 0.4.0.
All 24 modules still register; no functional code changes — pure
rename + banner refresh.

core/module.h

@@ -1,49 +1,49 @@
 /*
- * IAMROOT — core module interface
+ * SKELETONKEY — core module interface
  *
- * Every CVE module exports one or more `struct iamroot_module` entries
- * via a registry function. The top-level dispatcher (iamroot.c) walks
+ * Every CVE module exports one or more `struct skeletonkey_module` entries
+ * via a registry function. The top-level dispatcher (skeletonkey.c) walks
  * the global registry to implement --scan, --exploit, --mitigate, etc.
  *
  * This is intentionally a small interface. Modules carry the
  * complexity; the dispatcher just routes.
  */
 
-#ifndef IAMROOT_MODULE_H
-#define IAMROOT_MODULE_H
+#ifndef SKELETONKEY_MODULE_H
+#define SKELETONKEY_MODULE_H
 
 #include <stddef.h>
 #include <stdbool.h>
 
 /* Standard result codes returned by detect()/exploit()/mitigate().
  *
- * These map to top-level exit codes when iamroot is invoked with a
+ * These map to top-level exit codes when skeletonkey is invoked with a
  * single-module operation:
  *
- *   IAMROOT_OK            exit 0   detect: not vulnerable / clean
- *   IAMROOT_VULNERABLE    exit 2   detect: confirmed vulnerable
- *   IAMROOT_PRECOND_FAIL  exit 4   detect: preconditions missing
- *   IAMROOT_TEST_ERROR    exit 1   detect/exploit: error
- *   IAMROOT_EXPLOIT_OK    exit 5   exploit: succeeded (root achieved)
- *   IAMROOT_EXPLOIT_FAIL  exit 3   exploit: attempted but did not land
+ *   SKELETONKEY_OK            exit 0   detect: not vulnerable / clean
+ *   SKELETONKEY_VULNERABLE    exit 2   detect: confirmed vulnerable
+ *   SKELETONKEY_PRECOND_FAIL  exit 4   detect: preconditions missing
+ *   SKELETONKEY_TEST_ERROR    exit 1   detect/exploit: error
+ *   SKELETONKEY_EXPLOIT_OK    exit 5   exploit: succeeded (root achieved)
+ *   SKELETONKEY_EXPLOIT_FAIL  exit 3   exploit: attempted but did not land
  *
  * Implementation note: copy_fail_family's df_result_t shares these
  * numeric values intentionally so the family code can return its
  * existing constants without translation.
  */
 typedef enum {
-    IAMROOT_OK              = 0,
-    IAMROOT_TEST_ERROR      = 1,
-    IAMROOT_VULNERABLE      = 2,
-    IAMROOT_EXPLOIT_FAIL    = 3,
-    IAMROOT_PRECOND_FAIL    = 4,
-    IAMROOT_EXPLOIT_OK      = 5,
-} iamroot_result_t;
+    SKELETONKEY_OK              = 0,
+    SKELETONKEY_TEST_ERROR      = 1,
+    SKELETONKEY_VULNERABLE      = 2,
+    SKELETONKEY_EXPLOIT_FAIL    = 3,
+    SKELETONKEY_PRECOND_FAIL    = 4,
+    SKELETONKEY_EXPLOIT_OK      = 5,
+} skeletonkey_result_t;
 
 /* Per-invocation context passed to module callbacks. Lightweight for
  * now; will grow as modules need shared state (host fingerprint,
  * leaked kbase, etc.). */
-struct iamroot_ctx {
+struct skeletonkey_ctx {
     bool          no_color;     /* --no-color */
     bool          json;         /* --json (machine-readable output) */
     bool          active_probe; /* --active (do invasive probes in detect) */
@@ -52,8 +52,8 @@ struct iamroot_ctx {
     bool          full_chain;   /* --full-chain (attempt root-pop after primitive) */
 };
 
-struct iamroot_module {
-    /* Short id used on the command line: `iamroot --exploit copy_fail`. */
+struct skeletonkey_module {
+    /* Short id used on the command line: `skeletonkey --exploit copy_fail`. */
     const char *name;
 
     /* CVE identifier (or "VARIANT" if no CVE assigned). */
@@ -71,20 +71,20 @@ struct iamroot_module {
     const char *kernel_range;
 
     /* Probe the host. Should be side-effect-free unless ctx->active_probe
-     * is true. Return IAMROOT_VULNERABLE if confirmed,
-     * IAMROOT_PRECOND_FAIL if not applicable here, IAMROOT_OK if patched
-     * or otherwise immune, IAMROOT_TEST_ERROR on probe error. */
-    iamroot_result_t (*detect)(const struct iamroot_ctx *ctx);
+     * is true. Return SKELETONKEY_VULNERABLE if confirmed,
+     * SKELETONKEY_PRECOND_FAIL if not applicable here, SKELETONKEY_OK if patched
+     * or otherwise immune, SKELETONKEY_TEST_ERROR on probe error. */
+    skeletonkey_result_t (*detect)(const struct skeletonkey_ctx *ctx);
 
     /* Run the exploit. Caller has already passed the --i-know gate. */
-    iamroot_result_t (*exploit)(const struct iamroot_ctx *ctx);
+    skeletonkey_result_t (*exploit)(const struct skeletonkey_ctx *ctx);
 
     /* Apply a temporary mitigation. NULL if none offered. */
-    iamroot_result_t (*mitigate)(const struct iamroot_ctx *ctx);
+    skeletonkey_result_t (*mitigate)(const struct skeletonkey_ctx *ctx);
 
     /* Undo --exploit (e.g. evict from page cache) or --mitigate side
      * effects. NULL if no cleanup applies. */
-    iamroot_result_t (*cleanup)(const struct iamroot_ctx *ctx);
+    skeletonkey_result_t (*cleanup)(const struct skeletonkey_ctx *ctx);
 
     /* Detection rule corpus — embedded so the binary is self-
      * contained. Each may be NULL if this module ships no rules for
@@ -96,4 +96,4 @@ struct iamroot_module {
     const char *detect_falco;    /* falco rules content */
 };
 
-#endif /* IAMROOT_MODULE_H */
+#endif /* SKELETONKEY_MODULE_H */