feat(registry): migrate official packs from always-further to nolabs-ai namespace

[SequeI]

Linked Issue

Closes #

Summary

All official packs have moved from the always-further registry namespace to nolabs-ai. This commit updates all forward-facing references and adds a runtime guard so existing users are notified automatically.

Changes:

• Update all registry pack references (code, CLI help, READMEs, issue template) from always-further/* to nolabs-ai/*
• Add runtime deprecation guard in package_status: on every nono run/shell invocation, scan the lockfile for any installed always-further/* pack and print a clear migration instruction (nono remove + nono pull) to stderr
• Add migration section to README.md and crates/nono-cli/README.md explaining the remove-then-pull order and why it matters for wiring cleanup

Test Plan

Checklist

• An issue exists and is linked above
• All commits are signed-off, using DCO
• All new code follows the project's coding standards (CLAUDE.md) and is covered by tests
• Public-facing changes are paired with documentation updates
• Release note has been added to CHANGELOG.md if needed

[github-actions]

PR Review Summary

Size

Metric	Value
Lines added	+159
Lines removed	-85
Total changed	244
Classification	Medium (50–300 lines)

Affected crates

• crates/nono-cli — CLI changes. Verify argument parsing, flag documentation, and UX behaviour across supported platforms.

Blast radius — Broad

This PR touches: source code,documentation,configuration / policy files

---

_{Updated automatically on each push to this PR.}

[nogent-nolabs-ai]

nogent code review

No blocking issues; 1 design suggestion.

Findings (not tied to a changed line):

• 🔒 [MEDIUM · security] crates/nono-cli/src/package_status.rs:31 — The opencode pack is recognized as an official pack in crates/nono-cli/src/migration.rs, but it is completely omitted from the security and yank enforcement targets (OFFICIAL_PACK_STATUS_TARGETS) in crates/nono-cli/src/package_status.rs. This creates a security coverage gap where critical yank/advisory enforcements or update status warnings are bypassed for users of the official opencode pack. Define OPENCODE_PACK under OfficialPackStatusTarget and add it to OFFICIAL_PACK_STATUS_TARGETS so it is checked on invocation.

_{Automated code + security review. CI already covers clippy, rustfmt, tests, cargo-audit and commit-lint.}

[rnestler]

There are still quite some mentions of always-further throughout the codebase and especially the docs:

rg -c always-further/
README.md:2
docker/Dockerfile-musl:1
docker/Dockerfile-musl-cross:1
docker/Dockerfile-CI:1
docker/Dockerfile-headless:1
docker/Dockerfile:1
scripts/probe-claude-open-path.sh:1
scripts/test-linux-container.sh:1
tests/integration/test_client_startup.sh:4
tests/integration/test_profiles.sh:1
scripts/test-linux.sh:1
tools/test-update-server.py:1
scripts/diagnose-macos-browser-open.sh:4
scripts/claude-clear-nono.sh:5
scripts/codex-clear-nono.sh:6
CHANGELOG.md:199
docs/cli/development/index.mdx:2
docs/cli/getting_started/installation.mdx:8
docs/cli/clients/codex.mdx:20
docs/cli/clients/opencode.mdx:6
docs/cli/features/trust.mdx:2
docs/cli/getting_started/quickstart.mdx:6
docs/cli/clients/claude-code.mdx:30
docs/cli/features/session-lifecycle.mdx:5
docs/cli/clients/quickstart.mdx:3
docs/cli/features/profiles-groups.mdx:9
docs/cli/usage/developer-workflows.mdx:13
docs/cli/internals/capability-manifest.mdx:1
docs/cli/internals/containers.mdx:1
docs/cli/features/package-publishing.mdx:3
docs/cli/usage/troubleshooting.mdx:2
docs/cli/internals/landlock.mdx:3
packaging/rpm/nono-cli.spec.in:1
docs/cli/features/managing-packs.mdx:10
docs/cli/features/audit.mdx:1
docs/cli/features/supervisor.mdx:2
docs/cli/usage/examples.mdx:5
docs/cli/features/atomic-rollbacks.mdx:1
packaging/aur/PKGBUILD:5
docs/cli/usage/flags.mdx:15
crates/nono/src/trust/bundle.rs:9
crates/nono-cli/src/query_ext.rs:1
crates/nono-cli/README.md:2
crates/nono-cli/src/policy.rs:1
crates/nono-cli/src/profile_save_runtime.rs:1
crates/nono-cli/src/profile_runtime.rs:1
crates/nono-cli/src/profile_cmd.rs:1
crates/nono-cli/src/profile/builtin.rs:3
crates/nono-cli/src/profile/mod.rs:3

Some of them are needed of course (the pack migration guide for example) but others seem still outdated.