rename appdata folder and repo from unraid_scripts to varaverk

- TARGET_DIR, DATA_DIR: /mnt/user/appdata/unraid_scripts → /mnt/user/appdata/varaverk
- GITEA_REPO_PATH: Varaverk/Unraid_Scripts.git → Varaverk/varaverk.git
- DEV_ROOT: .../Development/Unraid_Scripts → .../Development/varaverk
- deploy hook path updated in .claude/settings.json
- All script comments, docs, and manual paths updated throughout

Partnership/partnership_transfer.sh

@@ -28,6 +28,32 @@
 #   Step 5:  Write State          — ACTIVE written locally and pushed to new mirror
 #
 # ==============================================================================================
+# OPERATIONAL SAFEGUARDS
+# ==============================================================================================
+#
+# Owner-Only Enforcement
+#   The script reads MY_ID from detect_hosts() and exits immediately if it is
+#   not the current PARTNERSHIP_OWNER_HOST. The mirror cannot run a transfer.
+#
+# Explicit Confirmation String
+#   Requires the exact passphrase from PARTNERSHIP_TRANSFER_CONFIRM via
+#   --confirm=<value>. Without a matching string the transfer is cancelled
+#   before any steps execute. Prevents accidental ownership changes.
+#
+# Active Partnership Guard
+#   Reads the local state file and exits if the current state is INACTIVE.
+#   A transfer without an active partnership has no defined outcome.
+#
+# Dual Health Verification
+#   Both servers must pass PARTNERSHIP_TRANSFER_STRIKES consecutive health
+#   checks before proceeding. A single failure resets the strike counter.
+#   After PARTNERSHIP_TRANSFER_MAX_ATTEMPTS total attempts the transfer aborts.
+#
+# Pre-transfer Final Sync
+#   A full sync in the current direction (owner → mirror) runs immediately
+#   before roles flip. Ensures the mirror is current before it becomes the owner.
+#
+# ==============================================================================================
 # CONFIGURATION
 # ==============================================================================================
 #
@@ -269,7 +295,7 @@ if [[ "$DRY_RUN" == false ]]; then
         -o ConnectTimeout="$SSH_TIMEOUT" \
         -o StrictHostKeyChecking=no \
         "$SCRIPTS_ROOT/master.conf" \
-        "root@${MIRROR_IP}:/mnt/user/appdata/unraid_scripts/master.conf" 2>/dev/null && \
+        "root@${MIRROR_IP}:/mnt/user/appdata/varaverk/master.conf" 2>/dev/null && \
         log "master.conf pushed to $NEW_OWNER ✅" || \
         error "Failed to push master.conf to $NEW_OWNER — set PARTNERSHIP_OWNER_HOST=\"$NEW_OWNER_ID\" manually"
 else