feat(build): 扫描门按可配严重度拦截并可接受已知风险，留存 Trivy 报告与 CycloneDX SBOM，面板构建页展示扫描结果

panel/src/i18n/resources/zh-CN/admin.json

@@ -45,7 +45,7 @@
   "build_status_failed": "失败",
   "build_status_cancelled": "已取消",
   "build_queued_hint": "同时运行的构建已达上限（[registry] max_concurrent_builds），这个构建会在前面的构建结束后自动开始。",
-  "view_logs_btn": "日志",
+  "view_logs_btn": "扫描与日志",
   "cancel_build_btn": "取消",
   "no_builds_title": "暂无构建任务",
   "no_builds_hint": "您可以使用右上角表单触发第一个镜像构建任务。",
@@ -238,5 +238,33 @@
   "trigger_build_desc": "输入镜像构建参数，在隔离命名空间中启动 Kaniko 流水线任务。",
   "builds_search_placeholder": "搜索构建 ID、镜像引用或状态...",
   "builds_refresh_failed": "构建列表刷新失败：{{reason}}",
-  "build_requested_by_you": "你"
+  "build_requested_by_you": "你",
+  "scan_title": "安全扫描",
+  "scan_blocked": "已拦截",
+  "scan_passed": "已通过",
+  "scan_loading": "正在读取安全扫描…",
+  "scan_none": "这次构建没有留存安全扫描：它在扫描步骤前就结束了，或者早于开始留存扫描的版本。",
+  "scan_load_failed": "读取安全扫描失败：{{reason}}",
+  "scan_meta_other": "扫描于 {{when}} · {{count}} 个软件包",
+  "scan_policy": "拦截级别 {{severities}}；尚无修复版本的漏洞只列出",
+  "scan_policy_unfixed": "拦截级别 {{severities}}，尚无修复版本的漏洞同样拦截",
+  "scan_counts_label": "按严重度统计的发现",
+  "scan_blocking_count_other": "其中 {{count}} 项拦截镜像",
+  "scan_clean": "Trivy 在这个镜像里没有发现任何问题。",
+  "scan_showing": "显示 {{total}} 项中的 {{shown}} 项，完整报告列出全部发现。",
+  "scan_col_id": "编号",
+  "scan_col_severity": "严重度",
+  "scan_col_package": "软件包",
+  "scan_col_version": "已装 → 修复版本",
+  "scan_col_target": "所在位置",
+  "scan_no_fix": "暂无修复",
+  "scan_blocks": "拦截",
+  "scan_policy_accepts_other": "{{count}} 个 ID 已作为已知风险接受",
+  "scan_accepted": "已接受",
+  "scan_accepted_title": "已列入 [registry] scan_accept 作为已知风险，不会拦截。",
+  "scan_secret": "密钥：{{title}}",
+  "scan_download_report": "Trivy 报告",
+  "scan_download_sbom": "SBOM",
+  "scan_not_kept": "这次构建未留存该文件：文件过大，或生成它的步骤失败。",
+  "scan_download_failed": "下载失败：{{reason}}"
 }