fix(app-iced, presenter): M114 r2 —— 登录失败走结构化错误码 + i18n，修 4 条 p2 与 3 条看图意见

p1（语言泄漏）：后端诊断串不再上屏
- presenter 新增 LoginFailure 原因码（denied / whitelist_pending / unreachable /
  not_authlib_server / bad_credentials / no_profile / store_failed / other）
- 页面按码查 i18n 出标题+正文+「Code: …」，原文只进日志/详细信息
- 进行中（Requesting）也走 i18n，不再复读后端中文状态串
- presenter/state 不再发中文 toast（成败由页面按 i18n 画）
- 新增守门测试：注入带 AADSTS 的失败事件，断言英文视图无 CJK 且含 code

p2-1 复制：on_account 返回 Task，page_messages 把 iced::clipboard::write 交回 runtime
p2-2 可见失败态：新增 AccountNotice（added/removed/switched/名字非法/重名/落盘失败/
      找不到），页面用 M3 内联 alert 画（不是 toast）；离线名字先按 3–16 位规则校验，
      失败不再清空输入
p2-3 重新登录按账户类型分派：微软→授权码流；第三方→预填服务器/登录名并提示补密码；
      离线→明确说明没有可重登的服务器账户
p2-4 入口收敛：删 chip 行；空态=三卡片；有账号时三卡收进 Add an account（按钮不再绑死微软轨）

看图意见/tower 三条：
- 失败横幅改成 M3 alert（SurfaceContainerHigh + 描边，errorContainer 只作图标块，
  不再通栏实心红）；色值本身经复审像素采样确认是 90/30 档，未改角色
- 当前账户卡补齐与列表一致的「服务器/登录名」行；无皮肤时明说 No skin available
- 页面级 scrollable 加 8px 右 gutter，滚动条不再压卡片
- 倒计时改 mm:ss（15:00 left），数字与冒号语言无关

p3（顺带）：AuthlibRequest / Form 手写 Debug 脱敏密码；HTTP 响应体与 base64 输出加上限；
离线提示文案与行为对齐；删除无人使用的 key；皮肤测试断言帽子层真的 blend

测试：app-iced lib 418 绿、presenter 151 / i18n 24 绿（workspace 全量另跑）

crates/i18n/src/catalog/account.rs

@@ -52,8 +52,7 @@ macro_rules! account_entries {
             AccountDeviceCodeLabel => ("Enter this code", "输入这个用户码"),
             AccountDeviceCodeCopy => ("Copy code", "复制用户码"),
             AccountDeviceLinkCopy => ("Copy link", "复制链接"),
-            AccountDeviceOpenLink => ("Open link", "打开链接"),
-            AccountDeviceCountdown => ("{secs}s left", "剩 {secs}s"),
+            AccountDeviceCountdown => ("{time} left", "剩 {time}"),
             AccountDeviceExpired => ("This code has expired. Start again for a fresh one.", "这个用户码已过期，重新开始换一个新的。"),
             AccountDeviceRetry => ("Try again", "重试"),
             AccountDeviceCancel => ("Cancel", "取消"),
@@ -67,7 +66,7 @@ macro_rules! account_entries {
             AccountPasswordLabel => ("Password", "密码"),
             AccountPasswordHint => ("Used once for this sign-in. It is never stored.", "只在这次登录里用一次，不会保存。"),
             AccountAuthlibSubmit => ("Sign in", "登录"),
-            AccountAuthlibIdleHint => ("Check the server address first; signing in only starts after the check passes.", "先校验服务器地址，通过之后才能登录。"),
+            AccountAuthlibIdleHint => ("The server is checked automatically when you sign in; Check server only does it up front.", "登录时会自动校验服务器；「校验服务器」只是提前跑一遍。"),
             // ── 皮肤区
             AccountSkinTitle => ("Skin", "皮肤"),
             AccountSkinNone => ("No skin available", "没有可用皮肤"),
@@ -80,6 +79,32 @@ macro_rules! account_entries {
             AccountServerOk => ("Server {server} is ready", "服务器 {server} 可用"),
             AccountLoginFailed => ("Sign-in failed", "登录失败"),
             AccountCurrentTitle => ("Current account", "当前账户"),
+            // ── 失败原因码（M114 r2：后端只给码，文案在这里；原文只进日志）
+            AccountFailureCode => ("Code: {code}", "代码：{code}"),
+            AccountFailureDenied => ("The server refused this sign-in (access denied).", "服务器拒绝了这次登录（拒绝访问）。"),
+            AccountFailureWhitelist => ("Microsoft has not approved this launcher's app registration yet. An administrator has to accept the app, then try again.", "微软还没批准本启动器的应用注册：需要管理员同意该应用后再试。"),
+            AccountFailureUnreachable => ("Could not reach the server. Check the network connection or the address, then try again.", "连不上服务器：检查网络或地址后重试。"),
+            AccountFailureNotAuthlib => ("This address does not look like an authlib-injector server (the API root usually ends with /api/yggdrasil/).", "这个地址不像 authlib-injector 服务器（API 根通常以 /api/yggdrasil/ 结尾）。"),
+            AccountFailureBadCredentials => ("The server rejected the username or password.", "服务器不认这个用户名或密码。"),
+            AccountFailureNoProfile => ("The account has no Minecraft profile on this server yet. Create the character on the server first.", "这个账号在该服务器上还没有角色：先在皮肤站里创建角色。"),
+            AccountFailureStore => ("Could not save the account to disk.", "账户没能写到磁盘上。"),
+            AccountFailureOther => ("The sign-in failed. The full reason is in the launcher log.", "登录失败，完整原因在启动器日志里。"),
+            AccountDeviceRequesting => ("Contacting Microsoft…", "正在联系微软…"),
+            // ── 账户页横幅（添加/删除/切换的结果；页面上真实可见，不是 toast）
+            AccountNoticeAdded => ("Added {name}", "已添加 {name}"),
+            AccountNoticeRemoved => ("Removed {name}", "已删除 {name}"),
+            AccountNoticeSwitched => ("{name} will be used for the next launch", "{name} 将作为下次启动的账户"),
+            AccountNoticeOfflineNameInvalid => ("Profile names must be 3–16 letters, digits or underscores.", "档案名必须是 3–16 位字母、数字或下划线。"),
+            AccountNoticeAccountExists => ("An account with that name already exists.", "同名账户已经存在。"),
+            AccountNoticeStoreFailed => ("Could not save the account store. Check the disk and try again.", "账户库写不进去：检查磁盘后重试。"),
+            AccountNoticeNotFound => ("That account no longer exists.", "这个账户已经不在了。"),
+            AccountNoticeOther => ("The account action failed. The full reason is in the launcher log.", "账户操作失败，完整原因在启动器日志里。"),
+            AccountNoticeDismiss => ("Dismiss", "关闭"),
+            AccountNoticeTitleFailed => ("Account action failed", "账户操作失败"),
+            AccountNoticeTitleDone => ("Account updated", "账户已更新"),
+            // ── 重新登录的引导
+            AccountHintAuthlibReauth => ("Enter the password again for {server}.", "请输入 {server} 的密码。"),
+            AccountHintOfflineNoRelogin => ("Local profiles have no server account to sign in again — create a new profile instead.", "本地档案没有可重新登录的服务器账户，请新建一个档案。"),
         } }
     };
 }

crates/i18n/src/catalog/golden.rs

@@ -336,8 +336,7 @@ pub(super) const GOLDEN: &[(&str, &str, &str)] = &[
     ("AccountDeviceCodeLabel", "Enter this code", "输入这个用户码"),
     ("AccountDeviceCodeCopy", "Copy code", "复制用户码"),
     ("AccountDeviceLinkCopy", "Copy link", "复制链接"),
-    ("AccountDeviceOpenLink", "Open link", "打开链接"),
-    ("AccountDeviceCountdown", "{secs}s left", "剩 {secs}s"),
+    ("AccountDeviceCountdown", "{time} left", "剩 {time}"),
     ("AccountDeviceExpired", "This code has expired. Start again for a fresh one.", "这个用户码已过期，重新开始换一个新的。"),
     ("AccountDeviceRetry", "Try again", "重试"),
     ("AccountDeviceCancel", "Cancel", "取消"),
@@ -350,7 +349,7 @@ pub(super) const GOLDEN: &[(&str, &str, &str)] = &[
     ("AccountPasswordLabel", "Password", "密码"),
     ("AccountPasswordHint", "Used once for this sign-in. It is never stored.", "只在这次登录里用一次，不会保存。"),
     ("AccountAuthlibSubmit", "Sign in", "登录"),
-    ("AccountAuthlibIdleHint", "Check the server address first; signing in only starts after the check passes.", "先校验服务器地址，通过之后才能登录。"),
+    ("AccountAuthlibIdleHint", "The server is checked automatically when you sign in; Check server only does it up front.", "登录时会自动校验服务器；「校验服务器」只是提前跑一遍。"),
     ("AccountSkinTitle", "Skin", "皮肤"),
     ("AccountSkinNone", "No skin available", "没有可用皮肤"),
     ("AccountSkinHint", "Skins come from the account's own server; nothing is generated locally.", "皮肤来自账户自己的服务器，本地不生成任何假皮肤。"),
@@ -361,4 +360,27 @@ pub(super) const GOLDEN: &[(&str, &str, &str)] = &[
     ("AccountServerOk", "Server {server} is ready", "服务器 {server} 可用"),
     ("AccountLoginFailed", "Sign-in failed", "登录失败"),
     ("AccountCurrentTitle", "Current account", "当前账户"),
+    ("AccountFailureCode", "Code: {code}", "代码：{code}"),
+    ("AccountFailureDenied", "The server refused this sign-in (access denied).", "服务器拒绝了这次登录（拒绝访问）。"),
+    ("AccountFailureWhitelist", "Microsoft has not approved this launcher's app registration yet. An administrator has to accept the app, then try again.", "微软还没批准本启动器的应用注册：需要管理员同意该应用后再试。"),
+    ("AccountFailureUnreachable", "Could not reach the server. Check the network connection or the address, then try again.", "连不上服务器：检查网络或地址后重试。"),
+    ("AccountFailureNotAuthlib", "This address does not look like an authlib-injector server (the API root usually ends with /api/yggdrasil/).", "这个地址不像 authlib-injector 服务器（API 根通常以 /api/yggdrasil/ 结尾）。"),
+    ("AccountFailureBadCredentials", "The server rejected the username or password.", "服务器不认这个用户名或密码。"),
+    ("AccountFailureNoProfile", "The account has no Minecraft profile on this server yet. Create the character on the server first.", "这个账号在该服务器上还没有角色：先在皮肤站里创建角色。"),
+    ("AccountFailureStore", "Could not save the account to disk.", "账户没能写到磁盘上。"),
+    ("AccountFailureOther", "The sign-in failed. The full reason is in the launcher log.", "登录失败，完整原因在启动器日志里。"),
+    ("AccountDeviceRequesting", "Contacting Microsoft…", "正在联系微软…"),
+    ("AccountNoticeAdded", "Added {name}", "已添加 {name}"),
+    ("AccountNoticeRemoved", "Removed {name}", "已删除 {name}"),
+    ("AccountNoticeSwitched", "{name} will be used for the next launch", "{name} 将作为下次启动的账户"),
+    ("AccountNoticeOfflineNameInvalid", "Profile names must be 3–16 letters, digits or underscores.", "档案名必须是 3–16 位字母、数字或下划线。"),
+    ("AccountNoticeAccountExists", "An account with that name already exists.", "同名账户已经存在。"),
+    ("AccountNoticeStoreFailed", "Could not save the account store. Check the disk and try again.", "账户库写不进去：检查磁盘后重试。"),
+    ("AccountNoticeNotFound", "That account no longer exists.", "这个账户已经不在了。"),
+    ("AccountNoticeOther", "The account action failed. The full reason is in the launcher log.", "账户操作失败，完整原因在启动器日志里。"),
+    ("AccountNoticeDismiss", "Dismiss", "关闭"),
+    ("AccountNoticeTitleFailed", "Account action failed", "账户操作失败"),
+    ("AccountNoticeTitleDone", "Account updated", "账户已更新"),
+    ("AccountHintAuthlibReauth", "Enter the password again for {server}.", "请输入 {server} 的密码。"),
+    ("AccountHintOfflineNoRelogin", "Local profiles have no server account to sign in again — create a new profile instead.", "本地档案没有可重新登录的服务器账户，请新建一个档案。"),
 ];