feat(firewall): Enterprise-UI-Redesign — KPI-Strip, Zone-Badges, Filter-Bar (v1.1.136)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

management-ui/src/i18n/locales/en/common.json

@@ -112,7 +112,28 @@
       "moveUp": "Move up (higher priority)",
       "moveDown": "Move down (lower priority)",
       "emptyTitle": "No custom firewall rules yet.",
-      "emptyDesc": "The system rules above keep SSH (rate-limited), HTTPS :443 and the mgmt UI :3443 open (anti-lockout). Add custom rules for app-specific inbound ports or cross-zone forwards."
+      "emptyDesc": "The system rules above keep SSH (rate-limited), HTTPS :443 and the mgmt UI :3443 open (anti-lockout). Add custom rules for app-specific inbound ports or cross-zone forwards.",
+      "logEnabled": "Logging active — matched packets are written to the firewall log",
+      "ruleDisabled": "Rule disabled"
+    },
+    "kpi": {
+      "policyRules": "Policy Rules",
+      "active": "active",
+      "disabled": "disabled",
+      "natRules": "NAT Rules",
+      "natHint": "DNAT / SNAT / Masquerade",
+      "zones": "Zones",
+      "zonesHint": "Network segments",
+      "defaultPolicy": "Default Policy",
+      "nftActive": "nftables active",
+      "nftInactive": "nftables inactive"
+    },
+    "filter": {
+      "search": "Search name / comment…",
+      "allActions": "All actions",
+      "allZones": "All zones",
+      "noResults": "No rules match the filter",
+      "noResultsHint": "Clear the filter to see all rules."
     },
     "nat": {
       "name": "Name", "priority": "Priority", "kind": "Kind", "enabled": "Enabled",