feat(07-07): replay the 15 user-api routes and both nuxt auth flows

Match PHP payloads, already-activated Winter 500 HTML, and direct-DB
seeding so the corpus can flip those routes to ported without onboarding.

Co-authored-by: Cursor <cursoragent@cursor.com>

plugin.go

@@ -32,6 +32,7 @@ var (
 	_ pact.HasModels        = (*Plugin)(nil)
 	_ pact.HasRoutes        = (*Plugin)(nil)
 	_ pact.HasMailTemplates = (*Plugin)(nil)
+	_ pact.HasLang          = (*Plugin)(nil)
 	_ pact.HasCommands      = (*Plugin)(nil)
 	_ surf.BucketProvider   = (*Plugin)(nil)
 	_ bouncer.UserProvider  = classes.GormUsers{}
@@ -43,6 +44,9 @@ var configFS embed.FS
 //go:embed views/mail
 var mailFS embed.FS
 
+//go:embed lang
+var langFS embed.FS
+
 // Plugin is the golem15.user plugin.
 type Plugin struct {
 	app       *backpack.App
@@ -160,6 +164,8 @@ func bearerFrom(r *http.Request) string {
 
 func (p *Plugin) ConfigFS() fs.FS { return configFS }
 
+func (p *Plugin) LangFS() fs.FS { return langFS }
+
 func (p *Plugin) MailTemplatesFS() fs.FS { return mailFS }
 
 func (p *Plugin) MailTemplates() []string {