fix(panel): remove internal spec references from user-facing text

panel/src/i18n/resources/en-US/account.json

@@ -2,7 +2,7 @@
   "title": "Account",
   "subtitle": "Identity and Minecraft linking.",
   "session": "Session",
-  "session_desc": "The panel itself holds no credentials — every request rides your existing session cookie, whether issued by local password sign-in or the platform's identity proxy (Zero-Trust / Access) (spec §7/§8).",
+  "session_desc": "The panel itself holds no credentials — every request rides your existing session cookie, whether issued by local password sign-in or the platform's identity proxy (Zero-Trust / Access).",
   "sign_out": "Sign out",
   "signing_out": "Signing out…",
   "minecraft_link": "Minecraft link",

panel/src/i18n/resources/en-US/admin.json

@@ -3,12 +3,12 @@
   "subtitle": "Server & content administration",
   "signed_in_as": " · signed in as {{email}}",
   "servers": "Servers",
-  "servers_desc": "Create platform servers from the structured §15 form and manage the ones you operate.",
+  "servers_desc": "Create platform servers from the structured form and manage the ones you operate.",
   "images": "Images",
   "images_desc": "The platform image whitelist — the value space the create form draws from.",
   "server_admin_subtitle": "Create platform servers from the structured form and manage the ones you operate.",
   "images_title": "Images",
-  "images_subtitle": "The platform image whitelist. Only enabled images can back a new server. Editing the whitelist from the Web is auditable (spec §14) — the mutation routes are a pending admin-tier slice, so this view is read-only for now.",
+  "images_subtitle": "The platform image whitelist. Only enabled images can back a new server. Editing the whitelist from the Web is auditable — the mutation routes are a pending admin-tier slice, so this view is read-only for now.",
   "no_images_title": "No images whitelisted",
   "no_images_hint": "The whitelist is empty — a platform admin must add one (CLI for now).",
   "enabled": "enabled",

panel/src/i18n/resources/en-US/servers.json

@@ -3,7 +3,7 @@
   "my_servers_subtitle": "Wake, stop, or claim the servers you can manage.",
   "no_servers_linked": "No servers linked to you",
   "no_servers_hint": "Claim an unowned server you have access to, or ask an admin to provision one.",
-  "my_servers_footer": "Servers and game types are provisioned and managed by the platform. You claim a node to operate it; raw cluster config is never exposed here (spec §15).",
+  "my_servers_footer": "Servers and game types are provisioned and managed by the platform. You claim a node to operate it; raw cluster config is never exposed here.",
   "phase_running": "Running",
   "phase_starting": "Starting",
   "phase_stopping": "Stopping",
@@ -28,7 +28,7 @@
   "console_offline_body": "The live console attaches automatically as soon as the server is running.",
   "my_servers_breadcrumb": "My servers",
   "console_card_title": "Console",
-  "console_card_desc": "Live, read-only output streamed from the running pod over SSE (spec §8). Commands run through a separate path — the panel never holds an RCON password.",
+  "console_card_desc": "Live, read-only output streamed from the running pod over SSE. Commands run through a separate path — the panel never holds an RCON password.",
   "log_connecting": "Connecting…",
   "log_live": "Live",
   "log_reconnecting": "Reconnecting…",
@@ -64,5 +64,5 @@
   "create_server_creating": "Creating…",
   "no_servers_managed": "No servers under your management yet",
   "no_servers_managed_hint": "Use \"New server\" to provision one from the vetted spec.",
-  "server_admin_footer": "Server creation goes through the structured form only — the platform maps your choices onto a vetted Kubernetes spec. Raw cluster config (host networking, host paths, arbitrary images, privileged pods) is never expressible here (spec §15)."
+  "server_admin_footer": "Server creation goes through the structured form only — the platform maps your choices onto a vetted Kubernetes spec. Raw cluster config (host networking, host paths, arbitrary images, privileged pods) is never expressible here."
 }

panel/src/i18n/resources/zh-CN/account.json

@@ -2,7 +2,7 @@
   "title": "账户",
   "subtitle": "身份验证与 Minecraft 关联。",
   "session": "会话",
-  "session_desc": "面板不持有凭据——每次请求均通过当前会话 Cookie 完成认证，无论该 Cookie 由本地密码登录还是平台身份代理（Zero-Trust / Access）签发（spec §7/§8）。",
+  "session_desc": "面板不持有凭据——每次请求均通过当前会话 Cookie 完成认证，无论该 Cookie 由本地密码登录还是平台身份代理（Zero-Trust / Access）签发。",
   "sign_out": "退出登录",
   "signing_out": "退出中…",
   "minecraft_link": "Minecraft 关联",

panel/src/i18n/resources/zh-CN/admin.json

@@ -3,12 +3,12 @@
   "subtitle": "服务器与内容管理",
   "signed_in_as": " · 当前登录：{{email}}",
   "servers": "服务器",
-  "servers_desc": "通过结构化表单（§15）创建并管理平台服务器。",
+  "servers_desc": "通过结构化表单创建并管理平台服务器。",
   "images": "镜像",
   "images_desc": "平台镜像白名单——创建服务器时的可选镜像范围。",
   "server_admin_subtitle": "通过结构化表单创建并管理平台服务器。",
   "images_title": "镜像",
-  "images_subtitle": "平台镜像白名单。仅已启用的镜像可用于创建服务器。Web 端编辑白名单可审计（spec §14）——变更接口待后续上线，当前仅可查看。",
+  "images_subtitle": "平台镜像白名单。仅已启用的镜像可用于创建服务器。Web 端编辑白名单可审计——变更接口待后续上线，当前仅可查看。",
   "no_images_title": "无白名单镜像",
   "no_images_hint": "白名单为空——平台管理员需通过 CLI 添加镜像。",
   "enabled": "已启用",

panel/src/i18n/resources/zh-CN/servers.json

@@ -3,7 +3,7 @@
   "my_servers_subtitle": "管理你拥有或可用的服务器。",
   "no_servers_linked": "暂无关联的服务器",
   "no_servers_hint": "认领一台你拥有访问权限的服务器，或联系管理员为你分配。",
-  "my_servers_footer": "服务器及游戏类型由平台统一管理。认领后即可操作节点，原始集群配置不会暴露在此（spec §15）。",
+  "my_servers_footer": "服务器及游戏类型由平台统一管理。认领后即可操作节点，原始集群配置不会暴露在此。",
   "phase_running": "运行中",
   "phase_starting": "启动中",
   "phase_stopping": "停止中",
@@ -28,7 +28,7 @@
   "console_offline_body": "服务器运行后，实时控制台将自动连接。",
   "my_servers_breadcrumb": "我的服务器",
   "console_card_title": "控制台",
-  "console_card_desc": "通过 SSE 从 Pod 实时流式输出的只读日志（spec §8）。命令执行走独立通道——面板不持有 RCON 密码。",
+  "console_card_desc": "通过 SSE 从 Pod 实时流式输出的只读日志。命令执行走独立通道——面板不持有 RCON 密码。",
   "log_connecting": "连接中…",
   "log_live": "实时",
   "log_reconnecting": "重连中…",
@@ -64,5 +64,5 @@
   "create_server_creating": "创建中…",
   "no_servers_managed": "你还没有管理的服务器",
   "no_servers_managed_hint": "使用「新建服务器」在线分配。",
-  "server_admin_footer": "服务器仅通过此结构化表单创建——平台将选择映射为审核后的 Kubernetes spec。宿主机网络、宿主机路径、任意镜像、特权 Pod 等原始集群配置在此不可表达（spec §15）。"
+  "server_admin_footer": "服务器仅通过此结构化表单创建——平台将选择映射为审核后的 Kubernetes spec。宿主机网络、宿主机路径、任意镜像、特权 Pod 等原始集群配置在此不可表达。"
 }

panel/src/pages/Dashboard.tsx

@@ -314,7 +314,7 @@ function FleetView({
                     <ShieldCheck className="h-4.5 w-4.5 text-primary shrink-0" />
                     <div>
                       <span className="font-semibold text-foreground mr-1">{images.length}</span>
-                      {t("images_count")}。所有后端镜像运行前均通过 Trivy CVE 漏洞扫描，强制在隔离的安全容器中托管（spec §16）。
+                      {t("images_count")}。所有后端镜像运行前均通过 Trivy CVE 漏洞扫描，强制在隔离的安全容器中托管。
                     </div>
                   </div>
                 </CardContent>