R-553: four decisions stop reading their own Hungarian words (sites 1-4)

Every Hungarian sentence is byte-identical; each decision now reads a signal set where the message is
made. util.KindErrorf builds the same bytes fmt.Errorf did while carrying a sentinel for errors.Is.

- Deploy status (api/router.go): deployStatusFor() by kind — stacks.ErrAlreadyDeployed (409),
  ErrRequiredField / ErrPathMissing / ErrNotEnoughMemory (400). The „kötelező" / „memória" /
  "does not exist" / "already deployed" text chain is gone.
- Off-site failure class (backup/offbox.go): ErrOffsiteQuota replaces the „tárhelykeretet" match. The
  restic/ssh signatures stay text matches on purpose — that output is not ours and is not translated.
- Alert placement (web/alerts.go): monitor.HealthReport carries WarningKinds parallel to Warnings;
  the "not on a separate drive" warning is inline by KIND. The hub report is untouched (builder.go
  copies Status/Issues/Warnings only) — pinned by a wire test.
- Stale off-site note (web/handlers.go): settings LastWarningKind + backup.OffboxWarnNoAppsSelected.
  The text test survives ONLY for kind == "" (a box whose last run predates 0.251.0) and is removed
  when R-570 closes; slice 2 must not translate that producer before then.

Tests (all red-proofed by restoring the pre-fix predicate — see the audit's redproofs.txt):
TestR553_Deploy_DecisionSurvivesWordingChange, TestR553_DeployHandlerUsesTheKind,
TestR553_DeployProducersCarryKindAndKeepTheirWords (through the real DeployStack),
TestR553_OffsiteQuota_{Decision,HeadLine}SurvivesWordingChange, TestR553_OffboxRunRecordsTheKind,
TestR553_StorageWarningsCarryKindsAndKeepTheirWords, TestR553_DiskWarningPlacementSurvivesWordingChange,
TestR553_HubReportWarningsAreUnchangedOnTheWire, TestR553_StaleNote*, TestR553_WarningKindIsPersistedAndCopied.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/alerts.go

@@ -4,7 +4,6 @@ import (
 	"fmt"
 	"hash/crc32"
 	"log"
-	"strings"
 	"sync"
 	"time"
 
@@ -196,7 +195,7 @@ func (am *AlertManager) Refresh(report *monitor.HealthReport, cfg *config.Config
 	}
 
 	// From health check warnings
-	for _, w := range report.Warnings {
+	for i, w := range report.Warnings {
 		alert := Alert{
 			ID:       "health-" + simpleHash(w),
 			Level:    "warning",
@@ -204,8 +203,13 @@ func (am *AlertManager) Refresh(report *monitor.HealthReport, cfg *config.Config
 			Link:     "/monitoring",
 			LinkText: "Rendszermonitor",
 		}
-		// Disk-related warnings rendered inline under storage bars, not in top banner
-		if strings.Contains(w, "meghajtón") || strings.Contains(w, "adattároló") || strings.Contains(w, "meghajtó") {
+		// R-553 — WHERE this warning is shown is decided by its KIND, not by the Hungarian words it
+		// contains. The old test was `strings.Contains(w, "meghajtón"/"adattároló"/"meghajtó")`, which
+		// matched exactly one of today's warnings (the not-on-a-separate-drive one, the only lower-case
+		// „meghajtón"); the day that sentence is translated the warning would jump from its quiet place
+		// under the storage bars to the red banner on EVERY page. Pinned by
+		// TestR553_DiskWarningPlacementSurvivesWordingChange.
+		if report.WarningKindAt(i) == monitor.WarnKindStorageNotSeparate {
 			alert.ID = "disk-not-separate"
 			alert.PageOnly = []string{"dashboard", "monitoring"}
 			alert.Inline = true