feat(auth): implement all 16 homepage/login/register review items

- add countArticles() (published-only, mirrors news-list) and warm total_articles
- localize homepage metadata; bind articleCount to both stats; unique photo alts
- drop duplicate news date and the mascot preload priorities
- extract shared AuthPageFrame/AuthUsersCards used by /login and /register
- login: localized noindex metadata, session redirect via safeRedirectPath,
  ?from passthrough from proxy, unified auth roster cache keys, registered notice
- register: localized metadata, session redirect to /me, unified cache keys
- add resend-verification flow on /verify with rate-limited non-enumerable action
- add safeRedirectPath() with unit tests
- register form: live requirements checklist + password mismatch guard
- login form: unverified state with resend-link CTA
- honour prefers-reduced-motion in TypewriterText
- add 6 translations across all 25 locales

src/messages/ar.json

@@ -6092,7 +6092,9 @@
 			"username": "اسم المستخدم",
 			"password": "كلمة المرور",
 			"showPassword": "إظهار",
-			"hidePassword": "إخفاء"
+			"hidePassword": "إخفاء",
+			"registeredSuccess": "تم إنشاء الحساب — تحقق من بريدك الوارد للحصول على رابط التحقق، ثم سجّل الدخول.",
+			"verifyEmailCta": "طلب رابط تحقق جديد"
 		},
 		"register": {
 			"title": "إنشاء حساب",
@@ -6192,7 +6194,11 @@
 			"invalidTitle": "Email verification",
 			"invalidSubtitle": "Invalid or expired link",
 			"invalidBody": "This verification link is not valid. Make sure you opened the full link from your email, or request a new one.",
-			"backToLogin": "Back to login"
+			"backToLogin": "Back to login",
+			"resendEmail": "البريد الإلكتروني",
+			"resendButton": "إرسال رابط جديد",
+			"resendSent": "إذا كان لهذا العنوان حساب، فسيصل رابط تحقق جديد قريبًا — تحقق من بريدك الوارد.",
+			"resendFailed": "تعذّر إرسال رابط جديد. حاول مرة أخرى بعد بضع دقائق."
 		},
 		"banned": {
 			"title": "You are banned",