Rename the supply agent everywhere it is named

Its Keycloak client, audience scope, client-secret key, workflow names and file
names, and the A2A card. Kafka moved first, under its own account and consumer
group.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

deploy/agents/supply.yaml

@@ -1,4 +1,4 @@
-# The A2A facade for Approvisionnement. It lives in the `agents` namespace with
+# The A2A facade for Supply. It lives in the `agents` namespace with
 # the other agents, not with n8n: what it is, is an agent — the workflow behind
 # it is an implementation detail its callers never see.
 apiVersion: apps/v1
@@ -31,7 +31,7 @@ spec:
               containerPort: 8080
           env:
             - name: ADAPTER_AGENT_NAME
-              value: approvisionnement
+              value: supply
             - name: ADAPTER_AGENT_DESCRIPTION
               value: >-
                 Supply decisions for the Classic Models catalog. Answers whether a