Expand i18n locales and improve reviews UI

Add many new language packs with RTL support, refresh brand assets, and harden review rendering with tests.

Co-authored-by: Cursor <cursoragent@cursor.com>

web/test/hostile-review.mjs

@@ -0,0 +1,20 @@
+/**
+ * The hostile review body, exactly as the card spec's acceptance test demands:
+ * HTML tags, a 500-character URL, a pasted npub, and 40 consecutive newlines.
+ * Everything in it is legal relay content someone could sign tomorrow, and the card
+ * must render all of it as inert text inside its own bounds.
+ */
+
+/** A 500-character URL: scheme + host + a long generated path. */
+export const LONG_URL = `https://very.long.example.com/${'segment/'.repeat(57)}page`.slice(0, 500);
+
+/** An npub pasted into prose: an unbroken 63-character token, no nostr: prefix. */
+export const PASTED_NPUB = 'npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6';
+
+export const HOSTILE_REVIEW_CONTENT = [
+  `<script>alert('xss')</script><img src=x onerror=alert(1)> <b>bold?</b>`,
+  `Look at ${LONG_URL} for details.`,
+  `My key is ${PASTED_NPUB} thanks`,
+  '\n'.repeat(40),
+  'The end. \u{1F9C0}✅',
+].join('\n');