feat: catalog browser polish + design system refresh + translation pipeline

- catalog: P5 restriction selector flow (mainGroupsPath), grid/tree/columns view modes for brands and models with persisted user settings
- translations: bulk translateMany() path with 1d cache-miss TTL, expanded automotive dictionary; categories.service now drives EN→TR via TranslationsService instead of mapper-side strings
- pcat: migrate auth from v1 JWT to v3 widget tokens (TWS- api-key + supporting X-* headers, IP-bound via DataImpulse proxy)
- pl24: new fetchP5Restrictions() for restriction-level navigation
- subscriptions: trial extended 7 → 30 days
- design: oklch color tokens, brand semantic color, Geist + Instrument Serif fonts, tinted shadows, button "brand" variant with hover-lift, accessible focus rings, skip link, 404 NotFound page, auth layout polish
- nginx: dynamic resolver for Faro upstream
- config: OPENROUTER_API_KEY env (used by emex translate bootstrap script)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

packages/config/src/index.ts

@@ -55,6 +55,9 @@ export const envSchema = z.object({
     .transform((v) => v === "true")
     .default("false"),
 
+  // OpenRouter (used by scripts/emex-translate-bootstrap.ts → DeepSeek V3)
+  OPENROUTER_API_KEY: z.string().optional(),
+
   // Postal Email
   POSTAL_API_URL: z.string().url().optional(),
   POSTAL_API_KEY: z.string().optional(),