v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/i18n_web.go

@@ -356,7 +356,7 @@ func (s *Server) localeFuncs(lang string) template.FuncMap {
 			if lt.Year() == now.Year() && lt.YearDay() == now.YearDay()+1 {
 				return fmt.Sprintf(b.Msg(lang, "func.time.tomorrow_at"), hm)
 			}
-			return lt.Format("2006-01-02") + " " + hm
+			return i18n.FormatDate(lang, lt) + " " + hm
 		},
 		// infraMeta: the protected infra stacks' curated identity (inframeta.go). Names that are product
 		// names stay; descriptions — and samba's display name — come from the bundle.