feat(orchestrator)!: S0 English everywhere, Sécurité, NATO hashes, ICAO digits

Requirement 001 phase 6, S0:

- Speech: the security class shows as "Sécurité" and is spoken as in
  maritime radio, "say-cure-ee-tay" three times. A hex run of 7 or more
  characters with a letter and a digit (commit, session, message ids) is
  spelled in the NATO alphabet; every other digit is spoken on its own
  in ICAO pronunciation (42305: four two tree zero fife). The spelling
  runs inside clip() before the length cut, so a phrase still fits
  SPEECH_LIMIT; the displayed text keeps its digits and hashes.
- English: every orchestrator label, tooltip, message, error, script
  output, document and test string is English (Regeln -> Firewall,
  Hierarchie -> Hierarchy, Steuerung -> Controls, Ausführen -> Run, ...);
  the page declares lang="en" and formats dates as en-GB. Task filter
  ids are English. German stays only in the skill trigger phrases that
  quote the operator, and as identifiers: the view keys (view=) and the
  leitstand id.
- tests/test_english.py scans every tracked text file for umlauts and
  German words, with an allowlist of the quoted trigger phrases.

BREAKING CHANGE: the Stream search tokens art: and seit: are now kind:
and since:; an old art: or seit: token counts as a plain word.

Evidence: make test 657 OK, ruff and markdownlint clean
(/tmp/s0-make-test-1.log); e2e 17 OK, none skipped (/tmp/s0-e2e-1.log);
MEDUSA 86 files, 24 findings on reworded strings accepted after an
independent skeptic (21 path:line, 0 rejected, no behaviour change in
signing, approving, rules, denying, offices, events), rescan 0 open.

🎯 Fix: 93 %
💥 Break: 4 %
💸 Cost: 100 %
⏱️ Time: –
🛡️ Security: 100 %
🏆 Score: 89
🚦 Gate: ✅ 90/5, cost and time <= 100, security 100 %

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_hub_inbox.py

@@ -20,7 +20,7 @@ class TestHubInbox(HubCase):
         decision_id = self.decision("Merge now")
         inbox = {item["id"]: item for item in self.snapshot()["inbox"]}
         self.assertEqual([inbox[key]["green"] for key in (green, red, ask_id, risky, decision_id)], [True, False, True, False, True])
-        self.assertEqual(inbox[risky]["warnings"], ["löscht rekursiv"])
+        self.assertEqual(inbox[risky]["warnings"], ["deletes recursively"])
         batch = [self.entry("review", green, "", ""), self.entry("ask", ask_id, "", ""), self.entry("decision", decision_id, "Merge now", "")]
         signer = key(-7, "main")
         self.assertEqual(self.approve([self.entry("review", green, "", ""), self.entry("review", red, "", "")], None)[0], 400)
@@ -77,8 +77,8 @@ class TestHubInbox(HubCase):
             with self.subTest(payload=payload):
                 self.assertEqual(self.post_json("/api/inbox/mark", payload, self.guard(self.host))[0], 400)
         titles = [row["title"] for row in self.events("kinds=approval")["events"]]
-        self.assertIn("Freigabe review: feat: green", titles)
-        self.assertTrue(any(title.startswith("Rückgängig: ") for title in titles))
+        self.assertIn("Grant review: feat: green", titles)
+        self.assertTrue(any(title.startswith("Undone: ") for title in titles))
 
     def test_the_sign_endpoint_and_the_page_offer_the_pinned_keys_only(self):
         ask_id = self.create_ask(ASK)
@@ -96,7 +96,7 @@ class TestHubInbox(HubCase):
         self.approvers.chmod(0o666)
         self.assertEqual(self.snapshot()["approvers"], [])
         html = self.index()
-        for text in ("Passkey registrieren", "navigator.credentials.get", "navigator.credentials.create", "approval.py pin --port", "~/.config/kvb-orchestrator/approvers.json", "nicht signiert"):
+        for text in ("Register passkey", "navigator.credentials.get", "navigator.credentials.create", "approval.py pin --port", "~/.config/kvb-orchestrator/approvers.json", "not signed"):
             with self.subTest(text=text):
                 self.assertIn(text, html)