fix: apply managed Nginx public entry without service restart

frontend/src/locales/en-US.json

@@ -900,21 +900,23 @@
     "domain": "Configured domain",
     "activeDomain": "Active domain",
     "saveDomain": "Save domain",
-    "restartRequired": "Domain saved; restart OpsX VPN to enable ports 80/443 and automatic issuance",
+    "restartRequired": "Gateway mode saved; switching between Go and Nginx requires restarting the management service",
+    "siteActivationRequired": "Entry saved; prepare and enable the Nginx site below for first use",
+    "applied": "Public entry updated; Nginx configuration is active",
     "saveFailed": "Could not save domain",
     "dns": "DNS",
     "certificate": "Certificate",
     "valid": "Valid",
     "pending": "Pending first HTTPS handshake",
     "notConfigured": "Disabled",
-    "saved": "Domain configuration saved",
+    "saved": "Public entry saved",
     "issuer": "Issuer",
     "expires": "Expires",
     "renewal": "Renewal",
     "automatic": "Automatic (autocert)",
     "ports": "HTTP / HTTPS ports",
     "externalPorts": "Managed by external Nginx; listener status not checked",
-    "setupHint": "Restart to apply a saved domain or mode. Before switching to Nginx, follow the deployment guide to install it, issue a certificate, and validate the configuration. Go mode caches certificates in data/acme; saving settings alone does not issue a certificate.",
+    "setupHint": "Changes to an active Nginx gateway apply on save. Prepare a certificate for initial setup. Only switching between Go and Nginx modes requires a restart.",
     "refresh": "Refresh status",
     "openHttps": "Open HTTPS health check",
     "loadFailed": "Could not load certificate status",
@@ -922,7 +924,7 @@
     "goMode": "Go automatic certificate (binds 80/443)",
     "nginxMode": "Nginx proxy (external 80/443)",
     "saveMode": "Save entry mode",
-    "nginxHint": "Save the Nginx mode and domain, restart the service, then enable the site and request a certificate. Public ports 80/443 must be open.",
+    "nginxHint": "An active Nginx gateway reloads on save. Initial setup requires enabling the site separately; the management service remains on port 18080.",
     "externalRenewal": "Managed by Certbot",
     "previewNginx": "Preview Nginx configuration",
     "previewOnly": "Configuration preview; HTTP handles issuance and HTTPS starts after the certificate exists.",