P1 complete: web front, test suite, CI — acceptance ALL GREEN

Fan-out integration + fixes found by the test/acceptance pass:
- FIX ring-buffer: chunks >= capacity skipped bytes now count into the
  monotonic offset (invariant: stream byte k lives at k % capacity) —
  window order was corrupted on unaligned big chunks
- FIX auth: non-numeric cookie expiry no longer bypasses expiration
- FIX protocol: safe-integer validation on ack.bytes / hello.protocol
- FIX @fastify/websocket v11: websocket route must be registered in an
  encapsulated context after plugin load (handler got REST signature)
- FIX flow-control deadlock found by e2e acceptance: client only ACKs
  on data receipt, so pausing with an unACKed residue in (LOW,
  ACK_EVERY] stalled both sides at 0.9 MB. ACK_EVERY now 64 KiB (<=
  LOW invariant, tested) + trailing debounced ACK in the web client
- Web: Vue 3 + Vite + Pinia + Tailwind 4 + vue-i18n (EN/FR) + xterm 6
  (fit + webgl fallback), multiplexed ws-client with reconnect/backoff
  and resync epochs
- Tests: 100 vitest (protocol fuzz, ring edges, auth, pty-manager flow
  control with mocked pty, REST e2e) ; CI Node 22/24 + pack-smoke
- scripts/acceptance-p1.mjs: real daemon + real WS client — boot,
  login, attach, stdin, 10 MB flood w/ ACK (13.7 MB/1.9s, RSS bounded),
  brutal disconnect + replay resync, kill broadcast, SIGTERM drain

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

packages/web/src/i18n/fr.ts

@@ -0,0 +1,53 @@
+import type en from './en';
+
+const fr: typeof en = {
+  common: {
+    appName: 'Arboretum',
+    loading: 'Chargement…',
+    cancel: 'Annuler',
+    logout: 'Se déconnecter',
+    language: 'Langue',
+  },
+  login: {
+    title: 'Connectez-vous avec votre jeton d’accès',
+    tokenLabel: 'Jeton d’accès',
+    tokenPlaceholder: 'arb_…',
+    submit: 'Se connecter',
+    submitting: 'Connexion…',
+    invalidToken: 'Jeton invalide',
+    rateLimited: 'Trop de tentatives — patientez avant de réessayer',
+    genericError: 'Échec de la connexion ({status})',
+  },
+  sessions: {
+    title: 'Sessions',
+    refresh: 'Rafraîchir',
+    empty: 'Aucune session — démarrez-en une ci-dessous.',
+    newSession: 'Nouvelle session',
+    cwdLabel: 'Répertoire de travail',
+    cwdPlaceholder: '/chemin/absolu/du/projet',
+    commandLabel: 'Commande',
+    creating: 'Création…',
+    open: 'Ouvrir',
+    observe: 'Observer',
+    kill: 'Tuer',
+    confirmKill: 'Confirmer',
+    live: 'en cours',
+    clients: 'aucun client | 1 client | {n} clients',
+    exitCode: 'code de sortie {code}',
+    statusLabel: {
+      starting: 'démarrage',
+      running: 'en cours',
+      exited: 'terminée',
+    },
+  },
+  terminal: {
+    observer: 'observateur (lecture seule)',
+    sessionEnded: 'Session terminée',
+    back: 'Sessions',
+  },
+  ws: {
+    reconnecting: 'Connexion perdue — reconnexion…',
+  },
+};
+
+export default fr;