chore: rename CLI to pfhub, update service-token command, and update docs/tests accordingly

tests/test_cli.py

@@ -830,7 +830,7 @@ def test_cli_help_exposes_bot_token_commands() -> None:
     repo = FakeRepo(_portfolio())
     runner = build_runner(repo)
 
-    result = runner.invoke(runner.app, ["bot", "token", "--help"])
+    result = runner.invoke(runner.app, ["service-token", "--help"])
 
     assert result.exit_code == 0
     assert "issue" in result.stdout
@@ -843,7 +843,7 @@ def test_cli_bot_token_issue_supports_json() -> None:
 
     result = runner.invoke(
         runner.app,
-        ["--format", "json", "bot", "token", "issue", "bot-1", "--name", "nightly"],
+        ["--format", "json", "service-token", "issue", "bot-1", "--name", "nightly"],
     )
 
     assert result.exit_code == 0
@@ -861,8 +861,7 @@ def test_cli_bot_token_issue_rejects_conflicting_expiry_options() -> None:
     result = runner.invoke(
         runner.app,
         [
-            "bot",
-            "token",
+            "service-token",
             "issue",
             "bot-1",
             "--ttl-days",
@@ -890,7 +889,7 @@ def test_cli_bot_token_revoke_can_abort() -> None:
 
     result = runner.invoke(
         runner.app,
-        ["bot", "token", "revoke", "bot-1", token.id],
+        ["service-token", "revoke", "bot-1", token.id],
         input="n\n",
     )
 
@@ -913,7 +912,7 @@ def test_cli_bot_token_revoke_force_succeeds() -> None:
 
     result = runner.invoke(
         runner.app,
-        ["--format", "json", "bot", "token", "revoke", "bot-1", token.id, "--force"],
+        ["--format", "json", "service-token", "revoke", "bot-1", token.id, "--force"],
     )
 
     assert result.exit_code == 0