docs: align de/fr guide labels with shipped UI

[yannickmonney]

Fixes #4475

Align the remaining German/French guide labels with the shipped catalogs at base 524e438626f8cf156c9c8b86a5223dc55d5d6b8f. Correct the German/French articles around the provider field and both French storage-label occurrences. The approvals tutorial now quotes the same four on-screen labels as English, including the approval title interpolated for imap-smtp.send. Headings, anchors, links and workflow behavior are unchanged.

Page	Previous wording	Exact label	Catalog key
docs/de/platform/automations/editor.md	Letzten Lauf anzeigen	Letzten Lauf einblenden	automations.detail.showLastRun
docs/de/tutorials/admin/connect-local-provider.md	Modell-Freigabeliste	Erlaubte Modelle	settings.providers.dialog.allowlist
docs/fr/tutorials/admin/connect-local-provider.md	Liste de modèles autorisés	Modèles autorisés	settings.providers.dialog.allowlist
docs/fr/self-hosted/configuration/data-residency.md	Stockage objet	Stockage d'objets	settings.dataResidency.orgStorage.title
docs/de/develop/connectors.md	Geheimnisse (project-agent surface)	Secrets	projects.agents.secrets.label
docs/de/platform/admin/governance/content-models.md	Allowlist	Erlaubte Liste	governance.modelAccess.modeLabels.allowlist
docs/de/platform/admin/governance/content-models.md	Blocklist	Blockierte Liste	governance.modelAccess.modeLabels.blocklist
docs/de/tutorials/editor/workflow-with-approvals.md	node-execution prose	Gelaufen	automations.runs.nodeStatus.ok
docs/de/tutorials/editor/workflow-with-approvals.md	waiting-run prose	Wartet	automations.runs.status.waiting
docs/de/tutorials/editor/workflow-with-approvals.md	pending-decision prose	Wartet auf deine Freigabe: imap-smtp.send	automations.runs.approval.title
docs/de/tutorials/editor/workflow-with-approvals.md	planned-input prose	Der Schritt würde aufrufen mit	automations.runs.approval.input
docs/fr/tutorials/editor/workflow-with-approvals.md	node-execution prose	Exécuté	automations.runs.nodeStatus.ok
docs/fr/tutorials/editor/workflow-with-approvals.md	waiting-run prose	En attente	automations.runs.status.waiting
docs/fr/tutorials/editor/workflow-with-approvals.md	pending-decision prose	En attente de ton approbation : imap-smtp.send	automations.runs.approval.title
docs/fr/tutorials/editor/workflow-with-approvals.md	planned-input prose	L'étape appellerait avec	automations.runs.approval.input

The unbolded German provider caption describes the model allowlist concept, so it remains prose. Other generic uses of “Geheimnisse” describe credentials rather than the project-agent field.

Validation: exact catalog/source comparison for every row; unchanged heading/frontmatter comparison; git diff --check; normal commit hooks. Canonical root bun run lint:links passed (449 documentation pages, 9,137 tracked files), invoked from services/docs using --cwd ../.. after fresh guard readings. The literal workspace command failed immediately because that script is defined only at the root. No installs, builds, stacks or browser checks.

[yannickmonney]

ACCEPT — independent LOCALE/DOCS review at 30592975708167397017b3e2c5bd87e8816ec3f2, against base 524e438626f8cf156c9c8b86a5223dc55d5d6b8f.

All six rows of #4475 are covered, including both governance modes and both occurrences of the French storage label. Both approvals tutorials now quote all four requested UI labels at the relevant checkpoints. Each label below matches its locale's platform catalog at the base; these are service-owned leaf values, so shared-package fallback does not replace them.

Locale	Exact documented UI label	Catalog key (topic + leaf)
de	Letzten Lauf einblenden	automations.detail.showLastRun
de	Erlaubte Modelle	settings.providers.dialog.allowlist
fr	Modèles autorisés	settings.providers.dialog.allowlist
fr	Stockage d'objets	settings.dataResidency.orgStorage.title
de	Secrets	projects.agents.secrets.label
de	Erlaubte Liste	governance.modelAccess.modeLabels.allowlist
de	Blockierte Liste	governance.modelAccess.modeLabels.blocklist
de	Gelaufen	automations.runs.nodeStatus.ok
de	Wartet	automations.runs.status.waiting
de	Wartet auf deine Freigabe: imap-smtp.send	automations.runs.approval.title with operation=imap-smtp.send
de	Der Schritt würde aufrufen mit	automations.runs.approval.input
fr	Exécuté	automations.runs.nodeStatus.ok
fr	En attente	automations.runs.status.waiting
fr	En attente de ton approbation : imap-smtp.send	automations.runs.approval.title with operation=imap-smtp.send
fr	L'étape appellerait avec	automations.runs.approval.input

Catalog files: services/platform/messages/{de,fr}/automations.yml, {de,fr}/settings.yml, de/projects.yml, and de/governance.yml. The approval card consumes runs.approval.title with {operation} and runs.approval.input; the run/node badges consume their respective status keys. French ASCII apostrophes and the space before the title's colon correctly preserve the shipped strings.

Surrounding grammar is sound: das Feld **Erlaubte Modelle** and le champ **Modèles autorisés** correctly introduce the unchanged labels; status wording and agreement remain natural. The complete diff is eight Markdown files, 12 lines replaced, limited to label corrections and the supporting wording needed to identify them. Headings, explicit anchors, paths, links, frontmatter, examples and assets are unchanged; no redirects are needed.

Coverage: LOCALE — PASS; DOCS — PASS. Other topics — NOT_APPLICABLE, because this is a docs-only label diff with no runtime, API, data, security, deployment or UI implementation changes.

Observed existing CI: all seven CI ready aggregators report SUCCESS. This is a static source/catalog review; no local tests, installs, builds, stacks or rendered-browser checks were run, and CI cache/retry cleanliness is not asserted. No source or branch updates, and no merge. Fleet can route the merge to #2.

[yannickmonney]

Merge-lane coverage dispositions at 30592975708167397017b3e2c5bd87e8816ec3f2. From agent #2 (TALE-359 run 458bfa0c), the merger.

• Implementer: C9 (card 54b0dfde).
• Independent ACCEPT at this exact head: C3, comment 6033228593.
• Independence: I am neither the author nor a reviewer of this PR.
• Composition: Composition: this batch (docs: align de/fr guide labels with shipped UI #4477, fix(platform): localize budget role labels #4478, fix(platform): reconcile model access after failed saves #4266, fix(platform): unify agent runtime terminology across locales #4480, then fix(platform): park a run refused at the sandbox exec cap, not fail it #4481 if my pending native review accepts it) composes cleanly in sequence on main 6eaa5699, and every PR keeps its patch-id. One file, docs/de/platform/automations/editor.md, is shared with fix(platform): unify agent runtime terminology across locales #4480 in a different hunk. The composed file keeps both edits, and neither adds a runtime term that fix(platform): unify agent runtime terminology across locales #4480's new catalog check rejects (that check reads platform message values only).

Topic	Disposition	Basis
DOCS	PASS	C3: all six rows of #4475 are covered. Every corrected bold label matches its locale's platform catalog leaf (15 labels listed by key). Headings, anchors, links and frontmatter are unchanged.
LOCALE	PASS	German and French grammar around the labels is natural, and the French apostrophes and colon spacing match the shipped strings (C3).
UX-SIMPLICITY, UX-CLARITY, A11Y, UI-RESPONSIVE, REL-MANUAL	NOT_APPLICABLE	Docs only. The docs site was built and tested for this head (merged onto 524e4386) by Docs container test and Playwright (docs), which passed.
CODE, SECURITY, DATA, PERFORMANCE, RESOURCES	NOT_APPLICABLE	Docs-only diff (8 Markdown files, 12 lines).
CICD	PASS; tested base STALE (docs-only)	67 checks: 35 success, 32 skipped, 0 failing; every PR-scope job and all 7 CI-ready aggregators are SUCCESS. The extra skips are path-filtered lanes behind PR scope, covered by a per-PR allowlist with a recorded reason. CI tested base 524e4386; main's six commits since then touch none of these files.
DEPLOYMENT, RECOVERY, PROVIDERS, OBSERVABILITY, WORKFLOW	NOT_APPLICABLE	Docs-site content only.

Merge-gate dry run at 10:56:28Z: open, CLEAN, head matches; no required contexts. checks total=67 not-completed=0 failing=0 [skipped=32 success=35] neutral=[] statuses=[pending total=0]. Every skip is on the by-design allowlist skip-allow-4477.txt; no check is pending or failing. Merging next with --squash --match-head-commit 30592975708167397017b3e2c5bd87e8816ec3f2.