Fix recipe name casing and update tests for kargs schema change

- recipe.yml: name SecAI_OS -> secai_os (Docker requires lowercase stage names)
- test_memory_protection.py: kargs_module["append"] -> kargs_module["kargs"]
  to match the BlueBuild kargs module schema update from previous commit

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: SecAI-Hub

recipes/recipe.yml

@@ -1,6 +1,6 @@
 --- # yaml-language-server: $schema=https://schema.blue-build.org/recipe-v1.json
 
-name: SecAI_OS
+name: secai_os
 description: "Offline-first Secure AI appliance (uBlue base) with sealed runtime and defense-in-depth."
 
 # SECURITY: Base image should be digest-pinned in production.

tests/test_memory_protection.py

@@ -48,22 +48,22 @@ class TestKernelArgs:
     def test_init_on_free(self):
         recipe = yaml.safe_load(RECIPE_PATH.read_text())
         kargs_module = next(m for m in recipe["modules"] if m.get("type") == "kargs")
-        assert "init_on_free=1" in kargs_module["append"]
+        assert "init_on_free=1" in kargs_module["kargs"]
 
     def test_init_on_alloc(self):
         recipe = yaml.safe_load(RECIPE_PATH.read_text())
         kargs_module = next(m for m in recipe["modules"] if m.get("type") == "kargs")
-        assert "init_on_alloc=1" in kargs_module["append"]
+        assert "init_on_alloc=1" in kargs_module["kargs"]
 
     def test_zswap_disabled(self):
         recipe = yaml.safe_load(RECIPE_PATH.read_text())
         kargs_module = next(m for m in recipe["modules"] if m.get("type") == "kargs")
-        assert "zswap.enabled=0" in kargs_module["append"]
+        assert "zswap.enabled=0" in kargs_module["kargs"]
 
     def test_swap_disabled(self):
         recipe = yaml.safe_load(RECIPE_PATH.read_text())
         kargs_module = next(m for m in recipe["modules"] if m.get("type") == "kargs")
-        assert "systemd.swap=0" in kargs_module["append"]
+        assert "systemd.swap=0" in kargs_module["kargs"]
 
 
 class TestTEEDetection: