rename: OAS becomes Kiosk, everywhere

officer kiosk is the product name; OAS was a placeholder that mimicked expo's
application services and is gone.

the rename is total because nothing has shipped: appName, permission key, all
four table prefixes, every index and check constraint name, the exported drizzle
symbols, and the secret-store purpose. no rows exist anywhere, so there is no
migration and no compatibility window - which is exactly why doing it now cost
nothing and doing it after the first publish would have cost a manual migration
on every install.

the one remaining mention of OAS is dated history in the manifest, naming what
this was ported from.

manifest.ts

@@ -1,21 +1,24 @@
 import type { PluginManifest } from '@@/plugins/manifest';
 
-// OAS — Officer Application Services. Build, sign and deliver iOS and Android apps to registered
-// devices: what EAS does, self-hosted.
+// Officer Kiosk — build, sign and deliver iOS and Android apps to your own registered devices.
+// What EAS does, self-hosted.
 //
-// Ported from the standalone Bun/Hono service in `officer-oas/`, whose access control was an invite key
+// Ported from the standalone Bun/Hono service that was called OAS, whose access control was an invite key
 // held in a browser's local storage. The rule we actually want is "the people already registered on the
 // platform", which is the thing the platform already knows how to enforce — so the key stops being
 // something a person holds and becomes something an account has.
 //
-// `appName` is the directory name: `oas`.
+// `appName` is the directory name: `kiosk`.
 export const manifest: PluginManifest = {
   publisher: 'officerdev',
   version: '1.0.0',
   platform: '>=1.0.0',
 
-  label: 'OAS',
+  label: 'Kiosk',
   summary: 'Build, sign and install iOS and Android apps on your own devices',
+  // A lucide glyph until the real artwork lands. Kiosk already has an icon and a splash screen drawn —
+  // drop the icon at `assets/icon.png` (served as `/plugins/kiosk/icon.png`) and the tile renders the
+  // artwork instead, with `tile: 'bare'` in the catalogue entry so nothing paints a square behind it.
   icon: 'Smartphone',
   color: '#a78bfa',
 
@@ -24,7 +27,7 @@ export const manifest: PluginManifest = {
   // devices) are enforced inside the router with `isSuperAdmin`, not by a second permission.
   permissions: [
     {
-      key: 'oas',
+      key: 'kiosk',
       label: 'App install',
       description: 'Install Officer apps on your own devices',
     },