feat(theme): ship exactly 2 themes (SRC default + VNClagoon); rebrand user-facing VNCmail+

Product decision 2026-08-05: exactly SRC (default) and VNClagoon ship as
selectable themes. Everything else (Qui, Nord, Catppuccin, Solarized,
Roundcube Elastic, Aurora Glass) is hidden via ThemePolicy.disabledBuiltinThemes
rather than deleted - cheap to re-enable later, zero code lost. Also removed
the hardcoded "Default/Bulwark" theme card from the Settings > Themes grid
(product wants exactly 2 theme choices, not 3).

Separately, found and fixed real "still says Bulwark" branding gaps:
- All 24 locale files: "Bulwark"/"Bulwark Mail"/"Bulwark Webmail" ->
  "VNCmail+" in every user-facing string (verified via the translations
  test, which only checks structural key parity across locales, not
  content - a straight string swap is safe against it. 48/48 still pass).
- PWA manifest fallback app name, package.json description/author.
- Demo mode fixtures: the "Welcome to Bulwark Mail!" email and identity
  signature a first-time demo user actually sees.
- The demo empty-state's logo was hardcoded to a literal Bulwark SVG file
  regardless of active theme - a real bug, not just stale text, since
  lib/theme-logo.ts's resolveThemeLogo() already exists and is already used
  correctly by the login page and nav rail for exactly this (theme-aware
  SRC mark / VNClagoon wordmark). Wired the same helper in here instead of
  a hardcoded path.

NOT touched: internal code comments referencing "Bulwark" as historical/
attribution context (e.g. design-rationale comments explaining why a value
differs from Bulwark's original) - those are harmless and a full-repo sweep
of every comment wasn't the ask.

Verified: typecheck clean, lint clean, translations test 48/48 passing.

lib/admin/types.ts

@@ -112,8 +112,22 @@ export interface ThemePolicy {
   defaultThemeId: string | null;
 }
 
+// Product decision 2026-08-05: exactly two themes ship for VNCmail+ — SRC
+// (default) and VNClagoon. Every other built-in preset (Qui, Nord,
+// Catppuccin, Solarized, Roundcube Elastic, Aurora Glass) stays in
+// lib/builtin-themes.ts (cheap to re-enable later) but is hidden by default
+// via this policy rather than deleted.
+const NON_SHIPPING_BUILTIN_THEMES = [
+  'builtin-qui',
+  'builtin-nord',
+  'builtin-catppuccin',
+  'builtin-solarized',
+  'builtin-roundcube-elastic',
+  'builtin-aurora-glass',
+];
+
 export const DEFAULT_THEME_POLICY: ThemePolicy = {
-  disabledBuiltinThemes: [],
+  disabledBuiltinThemes: NON_SHIPPING_BUILTIN_THEMES,
   disabledThemes: [],
   defaultThemeId: 'builtin-src',
 };

lib/demo/fixtures/emails.ts

@@ -40,15 +40,15 @@ export function createDemoEmails(): Email[] {
       keywords: {},
       size: 4200,
       receivedAt: demoDate(0, -2),
-      from: [{ name: 'Bulwark Team', email: 'welcome@bulwark.email' }],
+      from: [{ name: 'VNCmail+ Team', email: 'welcome@vncmail.example' }],
       to: [USER],
-      subject: 'Welcome to Bulwark Mail!',
+      subject: 'Welcome to VNCmail+!',
       sentAt: demoDate(0, -2),
-      preview: 'Thanks for trying out Bulwark Mail. This is a demo environment where you can explore all features...',
+      preview: 'Thanks for trying out VNCmail+. This is a demo environment where you can explore all features...',
       hasAttachment: false,
       ...bodies(
-        'Thanks for trying out Bulwark Mail!\n\nThis is a demo environment where you can explore all features without connecting to a real server. All data stays on your device.\n\nFeel free to:\n- Read, compose, and organize emails\n- Manage contacts and calendars\n- Configure filters and settings\n- Try keyboard shortcuts (press ? to see them)\n\nEnjoy exploring!',
-        '<div><h2>Welcome to Bulwark Mail!</h2><p>Thanks for trying out Bulwark Mail!</p><p>This is a demo environment where you can explore all features without connecting to a real server. <strong>All data stays on your device.</strong></p><p>Feel free to:</p><ul><li>Read, compose, and organize emails</li><li>Manage contacts and calendars</li><li>Configure filters and settings</li><li>Try keyboard shortcuts (press <kbd>?</kbd> to see them)</li></ul><p>Enjoy exploring!</p></div>',
+        'Thanks for trying out VNCmail+!\n\nThis is a demo environment where you can explore all features without connecting to a real server. All data stays on your device.\n\nFeel free to:\n- Read, compose, and organize emails\n- Manage contacts and calendars\n- Configure filters and settings\n- Try keyboard shortcuts (press ? to see them)\n\nEnjoy exploring!',
+        '<div><h2>Welcome to VNCmail+!</h2><p>Thanks for trying out VNCmail+!</p><p>This is a demo environment where you can explore all features without connecting to a real server. <strong>All data stays on your device.</strong></p><p>Feel free to:</p><ul><li>Read, compose, and organize emails</li><li>Manage contacts and calendars</li><li>Configure filters and settings</li><li>Try keyboard shortcuts (press <kbd>?</kbd> to see them)</li></ul><p>Enjoy exploring!</p></div>',
       ),
       messageId: '<welcome@demo.bulwark.email>',
     },

lib/demo/fixtures/identities.ts

@@ -6,8 +6,8 @@ export function createDemoIdentities(): Identity[] {
       id: 'demo-identity-primary',
       name: 'Demo User',
       email: 'demo@example.com',
-      textSignature: 'Best regards,\nDemo User\nBulwark Mail Demo',
-      htmlSignature: '<p>Best regards,<br><b>Demo User</b><br>Bulwark Mail Demo</p>',
+      textSignature: 'Best regards,\nDemo User\nVNCmail+ Demo',
+      htmlSignature: '<p>Best regards,<br><b>Demo User</b><br>VNCmail+ Demo</p>',
       mayDelete: false,
     },
     {