v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/recovery_handlers.go

@@ -7,6 +7,7 @@ import (
 
 	"gitea.dooplex.hu/admin/felhom-controller/internal/agentapi"
 	"gitea.dooplex.hu/admin/felhom-controller/internal/backup"
+	"gitea.dooplex.hu/admin/felhom-controller/internal/i18n"
 	"gitea.dooplex.hu/admin/felhom-controller/internal/settings"
 )
 
@@ -687,7 +688,7 @@ func (s *Server) addRecoveryBanner(data map[string]interface{}, r *http.Request)
 			for _, mark := range backup.AbandonRemindAtDays {
 				if st.DaysLeft <= mark {
 					data["RecoveryAbandonDays"] = st.DaysLeft
-					data["RecoveryAbandonDate"] = st.DueAt.Format("2006-01-02")
+					data["RecoveryAbandonDate"] = i18n.FormatDate(s.langFor(r), st.DueAt)
 					// R-365 follow-up: DaysLeft is a ceiling, so 0 means the due moment has PASSED and the
 					// sweep has not run yet. The template's `{{if .RecoveryAbandonDays}}` is false at 0, so the
 					// bar fell back to the undecided-box reminder text — and offered the reminder opt-out over