feat(orchestrator)!: S0 English everywhere, Sécurité, NATO hashes, ICAO digits

Requirement 001 phase 6, S0:

- Speech: the security class shows as "Sécurité" and is spoken as in
  maritime radio, "say-cure-ee-tay" three times. A hex run of 7 or more
  characters with a letter and a digit (commit, session, message ids) is
  spelled in the NATO alphabet; every other digit is spoken on its own
  in ICAO pronunciation (42305: four two tree zero fife). The spelling
  runs inside clip() before the length cut, so a phrase still fits
  SPEECH_LIMIT; the displayed text keeps its digits and hashes.
- English: every orchestrator label, tooltip, message, error, script
  output, document and test string is English (Regeln -> Firewall,
  Hierarchie -> Hierarchy, Steuerung -> Controls, Ausführen -> Run, ...);
  the page declares lang="en" and formats dates as en-GB. Task filter
  ids are English. German stays only in the skill trigger phrases that
  quote the operator, and as identifiers: the view keys (view=) and the
  leitstand id.
- tests/test_english.py scans every tracked text file for umlauts and
  German words, with an allowlist of the quoted trigger phrases.

BREAKING CHANGE: the Stream search tokens art: and seit: are now kind:
and since:; an old art: or seit: token counts as a plain word.

Evidence: make test 657 OK, ruff and markdownlint clean
(/tmp/s0-make-test-1.log); e2e 17 OK, none skipped (/tmp/s0-e2e-1.log);
MEDUSA 86 files, 24 findings on reworded strings accepted after an
independent skeptic (21 path:line, 0 rejected, no behaviour change in
signing, approving, rules, denying, offices, events), rescan 0 open.

🎯 Fix: 93 %
💥 Break: 4 %
💸 Cost: 100 %
⏱️ Time: –
🛡️ Security: 100 %
🏆 Score: 89
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_hub_cleanup.py

@@ -62,12 +62,12 @@ class TestHubCleanup(HubCase):
         done = branches["feature/done"]
         self.assertEqual(done["cleanup"], item)
         self.assertEqual(done["plan"], [
-            "feature/done @ 5b1e6fd3a7c0: merged-clean, gemergt durch #12",
-            f"entfernt den Worktree {item['worktree']}",
-            "löscht den lokalen Branch feature/done",
-            "bleibt: remote-branch (nur lokal)",
-            "stoppt den Compose-Stack demo-feature-done ohne -v",
-            "entfernt das Image demo:feature-done",
+            "feature/done @ 5b1e6fd3a7c0: merged-clean, merged by #12",
+            f"removes the worktree {item['worktree']}",
+            "deletes the local branch feature/done",
+            "stays: remote-branch (local only)",
+            "stops the Compose stack demo-feature-done without -v",
+            "removes the image demo:feature-done",
         ])
         self.assertEqual((done["merged_by"], done["merged_into"], done["gone"]), ("#12", "main", True))
         self.assertEqual({name: entry["cleanup"] for name, entry in branches.items() if name != "feature/done"}, {"feature": None, "feature/kept": None, "main": None})
@@ -76,7 +76,7 @@ class TestHubCleanup(HubCase):
     def test_signing_a_delete_needs_delete_ready_and_exactly_an_offered_item(self):
         item = self.ready(False)
         status, body = self.sign([item])
-        self.assertEqual((status, body.decode()), (400, "löschen gesperrt: Secret Service locked\n"))
+        self.assertEqual((status, body.decode()), (400, "delete blocked: Secret Service locked\n"))
         item = self.ready(True)
         kept = {**item, "branch": "feature/kept", "worktree": "", "tip": "0c9d8e7f6a5b4c3d2e1f0a9b8c7d6e5f4a3b2c1d"}
         for name, items in (("changed tip", [{**item, "tip": OTHER_TIP}]), ("skip reason", [kept]), ("pattern", [{**item, "branch": "feature/*"}]), ("twice", [item, item]), ("extra key", [{**item, "command": "rm -rf /"}])):