chore: stage changes before history rewrite

app/locales/en.json

@@ -8,6 +8,15 @@
   "nav.invites": "Invites",
   "nav.logout": "Logout",
   "nav.api_docs": "API Docs",
+  "nav.showcase": "Showcase",
+  "nav.admin": "Admin",
+  "admin.title": "System Admin",
+  "admin.tab_invites": "Invite Codes",
+  "admin.tab_config": "Settings",
+  "admin.config_title": "System Settings",
+  "admin.copyright_label": "Copyright Text",
+  "admin.copyright_hint": "Displayed at the bottom of all pages. Leave empty to hide.",
+  "admin.save_config": "Save",
   "login.title": "Login",
   "login.username": "Username",
   "login.password": "Password",
@@ -245,5 +254,23 @@
   "api_docs.ep.key_name_hint": "string (optional) — a label for the key",
   "api_docs.ep.country_hint": "two uppercase letters, e.g. JP",
   "api_docs.ep.date_hint": "format: YYYY-MM-DD or YYYY-MM-DDTHH:MM",
+  "apikey.permissions": "Permissions",
+  "apikey.perm.profiles_read": "Read Profiles",
+  "apikey.perm.profiles_write": "Write Profiles",
+  "apikey.perm.postcards_read": "Read Postcards",
+  "apikey.perm.postcards_write": "Write Postcards",
+  "apikey.perm.images_upload": "Upload Images",
+  "apikey.perm.hint": "No selection = full access (backward-compatible). Once checked, the key only has the selected permissions.",
+  "apikey.perm_full_access": "Full Access",
+  "apikey.edit": "Edit",
+  "apikey.save": "Save",
+  "apikey.cancel": "Cancel",
+  "api_docs.permissions": "Permission System",
+  "api_docs.permissions_desc": "Each API key can be assigned fine-grained permission scopes. Keys without any scope (legacy) have full access. Once scopes are set, the key can only access the corresponding endpoints.",
+  "api_docs.scope": "Scope",
+  "api_docs.scope_desc": "Description",
+  "api_docs.scope_endpoints": "Endpoints",
+  "api_docs.permissions_note": "A 403 response means the key is missing a required permission.",
+  "api_docs.permissions_keys_note": "API Key management endpoints (GET/POST/DELETE /keys) only require a valid API key for authentication, no specific permission scope needed.",
   "misc.required": " *"
 }

app/locales/zh.json

@@ -8,6 +8,15 @@
   "nav.invites": "邀请码管理",
   "nav.logout": "退出",
   "nav.api_docs": "API 文档",
+  "nav.showcase": "展示页",
+  "nav.admin": "系统管理",
+  "admin.title": "系统管理",
+  "admin.tab_invites": "邀请码管理",
+  "admin.tab_config": "系统设置",
+  "admin.config_title": "系统设置",
+  "admin.copyright_label": "Copyright 文本",
+  "admin.copyright_hint": "将显示在所有页面底部，留空则不显示。",
+  "admin.save_config": "保存设置",
   "login.title": "登录",
   "login.username": "用户名",
   "login.password": "密码",
@@ -245,5 +254,23 @@
   "api_docs.ep.key_name_hint": "string（可选）— Key 的备注名称",
   "api_docs.ep.country_hint": "两个大写字母，如 JP",
   "api_docs.ep.date_hint": "格式 YYYY-MM-DD 或 YYYY-MM-DDTHH:MM",
+  "apikey.permissions": "权限范围",
+  "apikey.perm.profiles_read": "读取 Profile",
+  "apikey.perm.profiles_write": "写入 Profile",
+  "apikey.perm.postcards_read": "读取明信片",
+  "apikey.perm.postcards_write": "写入明信片",
+  "apikey.perm.images_upload": "上传图片",
+  "apikey.perm.hint": "不勾选任何权限 = 完全访问（兼容旧 Key）。勾选后该 Key 仅拥有所选权限。",
+  "apikey.perm_full_access": "完全访问",
+  "apikey.edit": "编辑",
+  "apikey.save": "保存",
+  "apikey.cancel": "取消",
+  "api_docs.permissions": "权限系统",
+  "api_docs.permissions_desc": "每个 API Key 可以配置细粒度的权限范围。不配置权限时（旧 Key），默认完全访问。配置后仅拥有所选权限。",
+  "api_docs.scope": "权限 Scope",
+  "api_docs.scope_desc": "说明",
+  "api_docs.scope_endpoints": "对应端点",
+  "api_docs.permissions_note": "403 响应表示缺少所需权限。",
+  "api_docs.permissions_keys_note": "API Key 管理端点（GET/POST/DELETE /keys）仅需有效 Key 鉴权，不需要特定权限。",
   "misc.required": " *"
 }