followup: SafeVaultPath in note update, email i18n, strict check-i18n.sh

- applyRemoteNoteUpdate: use SafeVaultPath for vault mode, skip non-vault with log
- Email subjects/bodies moved to Go i18n (confirm + reset) in ru.json and en.json
- check-i18n.sh: ru/en key mismatch now FAIL (not WARNING)
- All builds, tests, frontend pass

scripts/check-i18n.sh

@@ -97,12 +97,14 @@ MISSING_EN=$(comm -23 <(echo "$RU_KEYS") <(echo "$EN_KEYS"))
 MISSING_RU=$(comm -23 <(echo "$EN_KEYS") <(echo "$RU_KEYS"))
 
 if [ -n "$MISSING_EN" ]; then
-  echo "WARNING: Keys in frontend ru.js but missing in en.js:"
+  echo "FAIL: Keys in frontend ru.js but missing in en.js:"
   echo "$MISSING_EN"
+  EXIT=1
 fi
 if [ -n "$MISSING_RU" ]; then
-  echo "WARNING: Keys in frontend en.js but missing in ru.js:"
+  echo "FAIL: Keys in frontend en.js but missing in ru.js:"
   echo "$MISSING_RU"
+  EXIT=1
 fi
 if [ -z "$MISSING_EN" ] && [ -z "$MISSING_RU" ]; then
   echo "OK: All frontend locale keys match between ru.js and en.js"
@@ -116,12 +118,14 @@ GO_MISSING_EN=$(comm -23 <(echo "$GO_RU_KEYS") <(echo "$GO_EN_KEYS"))
 GO_MISSING_RU=$(comm -23 <(echo "$GO_EN_KEYS") <(echo "$GO_RU_KEYS"))
 
 if [ -n "$GO_MISSING_EN" ]; then
-  echo "WARNING: Keys in Go ru.json but missing in en.json:"
+  echo "FAIL: Keys in Go ru.json but missing in en.json:"
   echo "$GO_MISSING_EN"
+  EXIT=1
 fi
 if [ -n "$GO_MISSING_RU" ]; then
-  echo "WARNING: Keys in Go en.json but missing in ru.json:"
+  echo "FAIL: Keys in Go en.json but missing in ru.json:"
   echo "$GO_MISSING_RU"
+  EXIT=1
 fi
 if [ -z "$GO_MISSING_EN" ] && [ -z "$GO_MISSING_RU" ]; then
   echo "OK: All Go locale keys match between ru.json and en.json"