feat(auth): implement all 16 homepage/login/register review items

- add countArticles() (published-only, mirrors news-list) and warm total_articles
- localize homepage metadata; bind articleCount to both stats; unique photo alts
- drop duplicate news date and the mascot preload priorities
- extract shared AuthPageFrame/AuthUsersCards used by /login and /register
- login: localized noindex metadata, session redirect via safeRedirectPath,
  ?from passthrough from proxy, unified auth roster cache keys, registered notice
- register: localized metadata, session redirect to /me, unified cache keys
- add resend-verification flow on /verify with rate-limited non-enumerable action
- add safeRedirectPath() with unit tests
- register form: live requirements checklist + password mismatch guard
- login form: unverified state with resend-link CTA
- honour prefers-reduced-motion in TypewriterText
- add 6 translations across all 25 locales

src/messages/en.json

@@ -1019,7 +1019,9 @@
 			"showPassword": "Show",
 			"hidePassword": "Hide",
 			"username": "Username",
-			"password": "Password"
+			"password": "Password",
+			"registeredSuccess": "Account created — check your inbox for the verification link, then sign in.",
+			"verifyEmailCta": "Request a new verification link"
 		},
 		"register": {
 			"title": "Create account",
@@ -1119,7 +1121,11 @@
 			"invalidTitle": "Email verification",
 			"invalidSubtitle": "Invalid or expired link",
 			"invalidBody": "This verification link is not valid. Make sure you opened the full link from your email, or request a new one.",
-			"backToLogin": "Back to login"
+			"backToLogin": "Back to login",
+			"resendEmail": "Email address",
+			"resendButton": "Send new link",
+			"resendSent": "If that address has an account, a new verification link is on its way — check your inbox.",
+			"resendFailed": "Couldn’t send a new link. Wait a few minutes and try again."
 		},
 		"banned": {
 			"title": "You are banned",