fix(i18n): emit bot expected-result codes from producers

[orangeCatDeveloper]

Summary

Bot producers (bot-test error/hint pairs, bot-events replies and status reasons, wechat-bridge setup hints, bot onboarding) emitted zh-only strings, so English users either saw Chinese or — where the bot settings pages guarded with /[㐀-鿿]/ content sniffing — silently lost the information. Producers now emit stable machine codes; settings-bot-copy maps each union exhaustively per locale with an explicit unknown-code fallback, and the zh-passthrough gates in the bot settings pages are gone. zh copy moved verbatim, en copy is new. Bot platform display names and zh command keyword sets are protocol/matching data and are untouched; bot-channel notices follow the bot audience language and are annotated rather than re-plumbed.

packages/core/redaction.ts is restructured on the way: the keyword classifier becomes classifyGeneralizedError() → GeneralizedErrorClass (bot onboarding emits the class as its code), and the two hand-mirrored en/zh message maps collapse into one UiCatalog<Record<GeneralizedErrorClass, string>> behind generalizedErrorMessageForLocale(…, locale). generalizedErrorMessage stays as the en wrapper for its callers; the zh-CN and zh-TW wrappers are removed and their last caller goes through the locale form. Adding a locale now means adding one catalog block, not a third classifier.

Split out of #4551 so each PR is one reviewer context. main now ships generalizedErrorMessageForLocale; this PR keeps its signature and adds the exported classifier and code union.

Allowlist warnings and help text are complete per-locale formatters rather than UI-assembled fragments. Each locale owns the three-ID preview and count wording: Chinese retains its total-count phrasing, while English now reports only the omitted IDs as remaining. The adjacent limit-reached help follows the same complete-message rule.

Refs #2672

Verification

workspace typecheck:                    0 errors
desktop main tests (dist):              1995 pass / 0 fail
packages/core tests:                    775 pass / 0 fail (incl. en+zh render via generalizedErrorMessageForLocale)
packages/runtime tests:                 3177 pass (5 sandbox-only filesystem-worker failures, unrelated)
CJK-sniff regexes in touched files:     0 remaining
rendered-output tests (en+zh):          bot connection-test codes — pass
biome (changed files):                  clean

Follow-up verification: 26 bot-detail rendering and settings-copy tests pass, including all three locales, empty lists, overflow counts, and the allowlist limit. Desktop build and all four typechecks, repository format/lint, and the renderer architecture check pass.

Four invalid IDs, with the first three shown:

Before:
These entries are not numeric IDs and may be usernames, so they will not match anyone: @alice, @bob, @carol and 4 more

After:
These entries are not numeric IDs and may be usernames, so they will not match anyone: @alice, @bob, @carol and 1 more

AI use

Select exactly one:

• No generative tool made a substantive contribution
• Generative tooling made a substantive contribution

Tool(s) and scope: Claude Code — analysis, implementation, tests, and this description, under the contributor's direction; the commit carries a Generated-by: Claude Code trailer.

OpenCode implemented the complete allowlist messages and count fix, added rendering tests, and updated this description; the follow-up commit carries Generated-by: OpenCode.

Checklist

• Tests cover the change and fail without it