refactor: rename Protect branding to Stack/Encryption

[calvinbrewer]

Summary

• Renames public API from Protect naming to Stack/Encryption (protect() → Encryption(), csTable/csColumn → encryptedTable/encryptedColumn, ProtectClient → EncryptionClient, etc.)
• All old names kept as deprecated aliases — nothing breaks
• Adds packages/stack as the new core package (source copied from packages/protect, renamed internally)
• Moves packages/protect-dynamodb → packages/dynamodb with imports updated to @cipherstash/stack
• Updates @cipherstash/drizzle to depend on @cipherstash/stack instead of @cipherstash/protect
• Updates all 8 example apps, all docs, READMEs, AGENTS.md, CONTRIBUTE.md, SECURITY.md, .cursorrules
• Adds CLAUDE.md (Claude Code project instructions) and MIGRATION.md (public migration guide)

What changed

Area	Changes
packages/stack/	New core package with all Protect→Encryption renames
packages/schema/	Added encryptedTable/encryptedColumn/encryptedValue exports + deprecated aliases for csTable/csColumn/csValue and Protect* types
packages/dynamodb/	Moved from packages/protect-dynamodb/, imports now use @cipherstash/stack
packages/drizzle/	Imports switched from @cipherstash/protect to @cipherstash/stack
examples/	All 8 examples updated: imports, types, factory calls, READMEs, package.json deps
docs/	All 17 doc files updated: code examples, prose, anchor links
Root files	AGENTS.md, CONTRIBUTE.md, SECURITY.md, .cursorrules, .cursor/commands, .github/workflows

Test plan

• pnpm run build passes
• pnpm --filter @cipherstash/stack test passes (249/251, 2 pre-existing skips)
• pnpm --filter @cipherstash/protect-dynamodb test passes (12/12)
• pnpm --filter @cipherstash/drizzle test passes (69/69)
• Deprecated imports still compile (protect, csTable, ProtectClient, etc.)

🤖 Generated with Claude Code

[changeset-bot]

⚠️ No Changeset found

Latest commit: 4d44ce5

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes changesets to release 11 packages

Name	Type
@cipherstash/protect	Minor
@cipherstash/schema	Minor
@cipherstash/stack	Minor
@cipherstash/drizzle	Major
@cipherstash/protect-dynamodb	Major
@cipherstash/basic-example	Patch
@cipherstash/dynamo-example	Patch
nest	Patch
next-drizzle-mysql	Patch
@cipherstash/nextjs-clerk-example	Patch
@cipherstash/typeorm-example	Patch

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch refactor/protect-to-stack-branding

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}