refactor(identity-webhook): remove legacy-env, ship 0.4.0

.github/workflows/bootstrap-publish.yml

@@ -5,7 +5,7 @@
 #
 # Token: npmjs.com → Access Tokens → Granular → Read and Write on @pymthouse
 #        → enable "Bypass two-factor authentication for automation"
-# Secret: gh secret set NPM_TOKEN -R pymthouse/clearinghouse-runtime
+# Secret: gh secret set NPM_TOKEN -R pymthouse/clearinghouse
 name: bootstrap-publish
 
 on:

.github/workflows/release.yml

@@ -2,7 +2,7 @@
 # repo, or npm returns E422 when verifying the sigstore bundle.
 #
 # npm auth: Trusted Publishing (OIDC). Configure on npmjs.com for
-# pymthouse/clearinghouse-runtime and workflow filename `release.yml`. Do not set
+# pymthouse/clearinghouse and workflow filename `release.yml`. Do not set
 # secrets.NPM_TOKEN on publish — it overrides OIDC and can cause EOTP.
 # See identity-webhook/docs/RELEASING.md.
 name: release

identity-webhook/docs/RELEASING.md

@@ -1,7 +1,7 @@
 # Releasing `@pymthouse/clearinghouse-identity-webhook`
 
 Releases are triggered by pushing a semver tag (`v*.*.*`) on
-`pymthouse/clearinghouse-runtime` (fork of [livepeer/clearinghouse](https://github.com/livepeer/clearinghouse)).
+`pymthouse/clearinghouse` (fork of [livepeer/clearinghouse](https://github.com/livepeer/clearinghouse)).
 The [release workflow](../../.github/workflows/release.yml) runs tests, publishes to npm via
 **trusted publishing** (OIDC), and creates a GitHub Release.
 
@@ -18,7 +18,7 @@ This package publishes with [npm trusted publishing](https://docs.npmjs.com/trus
    `@pymthouse` org).
 2. Open **Settings** → **Trusted publishing**.
 3. Add a **GitHub Actions** publisher:
-   - **Repository:** `pymthouse/clearinghouse-runtime`
+   - **Repository:** `pymthouse/clearinghouse`
    - **Workflow filename:** `release.yml` (exact name, including `.yml`)
    - **Environment:** leave empty unless you use a GitHub Environment
 4. **Remove** the `NPM_TOKEN` repository secret if it still exists. A leftover token