fix(i18n): RemoteTargets S3/SFTP-Labels + NTP-Interface-Labels vollständig lokalisieren

RemoteTargets: alle 20+ hardkodierten Form-Labels und deutschen Hilfetexte
(S3: Endpoint/Region/Bucket/AccessKey/SecretKey/PathPrefix/HTTPS;
 SFTP: Host/Port/Username/Password/PrivateKey/RemoteDir/HostKeyFp)
sind jetzt in t()-Aufrufen mit remotes.s3.*/remotes.sftp.*-Keys.

NTP: Listen-Address-Dropdown-Labels (alle IPv4/IPv6-Interfaces, Loopback)
verwenden jetzt dns.settings.allIPv4/allIPv6/loopback (identisch zu DNS-Settings).
NTP-Pool-Adresse-Placeholder → t('ntp.pool.addressPlaceholder').

en/de: alle neuen Keys ergänzt.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

management-ui/src/i18n/locales/de/common.json

@@ -806,6 +806,7 @@
       "kindServer": "server — einzelner Host",
       "address": "Adresse / Host",
       "addressExtra": "FQDN (für pool: 0.de.pool.ntp.org) oder IP.",
+      "addressPlaceholder": "0.de.pool.ntp.org oder 10.0.0.10",
       "iburst": "iburst",
       "prefer": "prefer",
       "minpoll": "min-poll",
@@ -1090,6 +1091,34 @@
     "testFailed": "Test fehlgeschlagen",
     "confirmDelete": "Ziel {{name}} wirklich löschen?",
     "targetExtra": "Frei-Text-Label für die Übersicht. Setze hier den Bucket/Path-Hinweis (s3://my-bucket oder sftp://backup@host).",
+    "namePlaceholder": "z.B. MinIO offsite / Hetzner Storage Box",
+    "kindS3": "S3 (AWS / MinIO / R2 / B2 / Hetzner Object)",
+    "kindSftp": "SFTP (SSH)",
+    "s3": {
+      "endpoint": "Endpoint",
+      "endpointExtra": "s3.amazonaws.com / minio.example.com:9000 / fsn1.your-objectstorage.com",
+      "region": "Region",
+      "regionPlaceholder": "eu-central-1 / auto (R2)",
+      "bucket": "Bucket",
+      "accessKey": "Access Key",
+      "secretKey": "Secret Key",
+      "pathPrefix": "Path Prefix",
+      "pathPrefixExtra": "z.B. edgeguard/utm-1 — wird vor jedem Dateinamen gesetzt",
+      "useSsl": "HTTPS (use_ssl)"
+    },
+    "sftp": {
+      "host": "Host",
+      "port": "Port",
+      "username": "Benutzername",
+      "password": "Passwort",
+      "passwordExtra": "Entweder Passwort ODER Private Key.",
+      "privateKey": "Private Key (OpenSSH, base64)",
+      "privateKeyPlaceholder": "base64-kodierter OpenSSH Private Key",
+      "remoteDir": "Remote-Verzeichnis",
+      "remoteDirExtra": "z.B. /backups/edgeguard",
+      "hostKeyFp": "Host-Key-Fingerprint",
+      "hostKeyFpExtra": "Optional. SHA256:... — leer lassen für TOFU (unsicher gegen MitM)"
+    },
     "col": {
       "name": "Name",
       "kind": "Typ",