Escrow re-auth answers in the box language; a stacks test no longer writes into its source folder

Both fixed without a row (size rule): login.msg.wrong_password for the escrow re-auth
(TestEscrowReauth_WrongPasswordInTheBoxLanguage, red-proved); cmdManager gets its own DataDir (the update
journal went into internal/stacks/, and the R-578 source walk tripped on it once).

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/stacks/after_setup_r717_test.go

@@ -76,6 +76,9 @@ func wireCmdManager(m *Manager, f *fakeSwitch) *bytes.Buffer {
 func cmdManager(t *testing.T, yml string) (*Manager, *fakeSwitch, *bytes.Buffer, string) {
 	t.Helper()
 	m := gateManager(t, yml)
+	// The update journal lives in DataDir; empty, it was written into this package's SOURCE folder
+	// (update-journal.json + .tmp), where the R-578 source walk running in parallel could trip on it.
+	m.cfg.Paths.DataDir = t.TempDir()
 	f := &fakeSwitch{}
 	buf := wireCmdManager(m, f)
 	dir := closedGate(t, m)