chore: stage changes before history rewrite

app/locales/en.json

@@ -8,6 +8,15 @@
   "nav.invites": "Invites",
   "nav.logout": "Logout",
   "nav.api_docs": "API Docs",
+  "nav.showcase": "Showcase",
+  "nav.admin": "Admin",
+  "admin.title": "System Admin",
+  "admin.tab_invites": "Invite Codes",
+  "admin.tab_config": "Settings",
+  "admin.config_title": "System Settings",
+  "admin.copyright_label": "Copyright Text",
+  "admin.copyright_hint": "Displayed at the bottom of all pages. Leave empty to hide.",
+  "admin.save_config": "Save",
   "login.title": "Login",
   "login.username": "Username",
   "login.password": "Password",
@@ -245,5 +254,23 @@
   "api_docs.ep.key_name_hint": "string (optional) — a label for the key",
   "api_docs.ep.country_hint": "two uppercase letters, e.g. JP",
   "api_docs.ep.date_hint": "format: YYYY-MM-DD or YYYY-MM-DDTHH:MM",
+  "apikey.permissions": "Permissions",
+  "apikey.perm.profiles_read": "Read Profiles",
+  "apikey.perm.profiles_write": "Write Profiles",
+  "apikey.perm.postcards_read": "Read Postcards",
+  "apikey.perm.postcards_write": "Write Postcards",
+  "apikey.perm.images_upload": "Upload Images",
+  "apikey.perm.hint": "No selection = full access (backward-compatible). Once checked, the key only has the selected permissions.",
+  "apikey.perm_full_access": "Full Access",
+  "apikey.edit": "Edit",
+  "apikey.save": "Save",
+  "apikey.cancel": "Cancel",
+  "api_docs.permissions": "Permission System",
+  "api_docs.permissions_desc": "Each API key can be assigned fine-grained permission scopes. Keys without any scope (legacy) have full access. Once scopes are set, the key can only access the corresponding endpoints.",
+  "api_docs.scope": "Scope",
+  "api_docs.scope_desc": "Description",
+  "api_docs.scope_endpoints": "Endpoints",
+  "api_docs.permissions_note": "A 403 response means the key is missing a required permission.",
+  "api_docs.permissions_keys_note": "API Key management endpoints (GET/POST/DELETE /keys) only require a valid API key for authentication, no specific permission scope needed.",
   "misc.required": " *"
 }