feat(i18n): add multi-language support (ja/ko/vi/ru/zh-TW) with system auto-detection

- Extend AppLanguage to 7 locales: zh-CN, zh-TW, en, ja, ko, vi, ru
- Auto-detect system language via navigator.languages; fallback to English
- Add BCP47 locale mapping for date formatting and sorting
- Create 50 translation JSON files (5 languages × 10 namespaces, 1137 keys each)
- Update language selector with native language names
- Extend locale key parity test to cover all 7 languages (70 assertions)
- Add VNC/RDP desktop, serial terminal, AI agent, port forwarding, and SFTP features
- Add credential encryption, host metrics, session backup crypto, and zmodem bridge
- Update Rust backend: desktop services, host metrics, SSH/SFTP enhancements

test/utils/agentHarness.test.ts

@@ -1,6 +1,7 @@
 import { describe, expect, it } from 'vitest'
 import { analyzeAgentOutput } from '../../src/utils/agentOutput'
 import {
+  agentCommandAllowFingerprint,
   agentCommandNeedsConfirmation,
   assessAgentCommandRisk,
 } from '../../src/utils/agentCommandRisk'
@@ -21,13 +22,22 @@ describe('Agent command guardrail', () => {
     expect(assessAgentCommandRisk(command)).toBe(expected)
   })
 
-  it('uses strict, balanced and permissive confirmation thresholds', () => {
+  it('uses strict and relaxed confirmation thresholds', () => {
     expect(agentCommandNeedsConfirmation('safe', 'strict')).toBe(false)
     expect(agentCommandNeedsConfirmation('medium', 'strict')).toBe(true)
-    expect(agentCommandNeedsConfirmation('medium', 'balanced')).toBe(false)
-    expect(agentCommandNeedsConfirmation('high', 'balanced')).toBe(true)
-    expect(agentCommandNeedsConfirmation('high', 'permissive')).toBe(false)
-    expect(agentCommandNeedsConfirmation('critical', 'permissive')).toBe(false)
+    expect(agentCommandNeedsConfirmation('medium', 'relaxed')).toBe(false)
+    expect(agentCommandNeedsConfirmation('high', 'relaxed')).toBe(true)
+    expect(agentCommandNeedsConfirmation('critical', 'relaxed')).toBe(false)
+    expect(agentCommandNeedsConfirmation('critical', 'strict')).toBe(false)
+  })
+
+  it('fingerprints similar temp-path commands for session Always', () => {
+    expect(agentCommandAllowFingerprint('rm /tmp/tmp.3RUZRHTwk2', 'high')).toBe(
+      agentCommandAllowFingerprint('rm /tmp/tmp.ABCDEFG123', 'high')
+    )
+    expect(agentCommandAllowFingerprint('rm /tmp/tmp.3RUZRHTwk2', 'high')).not.toBe(
+      agentCommandAllowFingerprint('rm -rf /var/log/nginx', 'high')
+    )
   })
 })