Rebuild du site sur Astro : i18n multilingue, faits verifies, Docker, CI, tests

- Astro statique, EN par defaut + /fr/ + /nl/, detection langue navigateur
- i18n par fichiers JSON, ajouter une langue = ajouter des traductions
- Contenu original porte a l'identique (diff d'inventaire par langue)
- Chronologie legislative corrigee sur sources primaires (PE, Conseil, votes)
- Timeline 23 precedents + observatoire 35 items + annuaire 66 outils FOSS,
  chaque affirmation verifiee et sourcee
- Zero requete tierce (teste), lisible JS coupe, axe WCAG AA x2 themes
- Version offline monofichier par langue a chaque build
- Docker multi-stage vers nginx + CSP stricte auto-generee
- CI GitHub Actions (SHA-pinnees) + verification hebdo des liens
- CONTRIBUTING : divulgation d'affiliation obligatoire, allowlist de
  domaines testee en CI

src/i18n/content/en/directory.json

@@ -0,0 +1,68 @@
+{
+  "signal": { "body": "Replaces WhatsApp. E2EE by default, non-profit foundation." },
+  "simplex-chat": { "body": "No identifier at all: even servers can’t know who talks to whom." },
+  "session": { "body": "No phone number, onion routing." },
+  "element-matrix": { "body": "Replaces Discord/Slack. Federated, self-hostable." },
+  "briar": { "body": "P2P with no internet (Bluetooth/Tor): protests, blackouts." },
+  "molly": { "body": "Hardened Signal for Android (fully FOSS variant)." },
+  "thunderbird": { "body": "The reference free mail client, OpenPGP built in." },
+  "proton-mail": { "body": "Open-source apps of the Swiss encrypted service." },
+  "tuta": { "body": "Free apps, post-quantum encryption, EU jurisdiction." },
+  "firefox": { "body": "Replaces Chrome. The independent engine." },
+  "tor-browser": { "body": "Network anonymity, anti-fingerprinting." },
+  "mullvad-browser": { "body": "The Tor Project’s browser, without the Tor network." },
+  "brave": { "body": "Chromium that blocks ads and trackers by default." },
+  "ublock-origin": { "body": "THE ad and tracker blocker." },
+  "searxng": { "body": "Self-hostable metasearch engine." },
+  "wireguard": { "body": "The modern VPN protocol everyone builds on." },
+  "mullvad-vpn": { "body": "Client of the no-account VPN (cash/Monero accepted)." },
+  "proton-vpn": { "body": "Free clients, honest free tier." },
+  "tor": { "body": "The network that separates who you are from what you do." },
+  "tailscale": { "body": "Private WireGuard network between your devices." },
+  "headscale": { "body": "The Tailscale coordination server, on your hardware." },
+  "pi-hole": { "body": "Blocks ads and trackers for the whole network." },
+  "adguard-home": { "body": "Pi-hole alternative with a modern UI." },
+  "bitwarden": { "body": "Cross-platform password manager." },
+  "vaultwarden": { "body": "Lightweight self-hosted Bitwarden server." },
+  "keepassxc": { "body": "100% local vault, zero cloud." },
+  "aegis": { "body": "2FA codes (TOTP) in a local encrypted vault (Android)." },
+  "ente-auth": { "body": "2FA with end-to-end encrypted sync." },
+  "nextcloud": { "body": "Replaces the whole Google suite, at home." },
+  "cryptomator": { "body": "Encrypts your files BEFORE any cloud." },
+  "syncthing": { "body": "Device-to-device sync, no server." },
+  "restic": { "body": "Encrypted, deduplicated, automatic backups." },
+  "immich": { "body": "Self-hosted Google Photos (faces, search)." },
+  "ente-photos": { "body": "E2EE photos, on-device recognition." },
+  "libreoffice": { "body": "The free office suite." },
+  "onlyoffice": { "body": "Self-hostable collaborative office." },
+  "joplin": { "body": "Markdown notes, optional encryption and sync." },
+  "standard-notes": { "body": "Notes encrypted by default." },
+  "cryptpad": { "body": "Collaborative Google Docs, fully encrypted." },
+  "organic-maps": { "body": "Offline maps with zero tracking (OpenStreetMap)." },
+  "osmand": { "body": "Power-user maps (hiking, contour lines)." },
+  "jitsi-meet": { "body": "Video calls with no account, self-hostable." },
+  "mastodon": { "body": "Replaces X/Twitter. Federated, no imposed algorithm." },
+  "pixelfed": { "body": "The fediverse’s Instagram." },
+  "peertube": { "body": "Federated YouTube." },
+  "lemmy": { "body": "Federated Reddit." },
+  "damus": { "body": "Nostr client: your identity is a key pair." },
+  "ollama": { "body": "Run LLMs locally, one command." },
+  "llama-cpp": { "body": "The local inference engine that made it all possible." },
+  "jan": { "body": "100% local ChatGPT-like, simple UI." },
+  "gpt4all": { "body": "Privacy-minded local LLMs, CPU-friendly." },
+  "grapheneos": { "body": "De-Googled, hardened Android (Pixel)." },
+  "tails": { "body": "Amnesic USB OS, everything through Tor." },
+  "qubes-os": { "body": "Compartmentalisation via sealed VMs." },
+  "f-droid": { "body": "The 100% free app store." },
+  "postmarketos": { "body": "Linux on abandoned phones." },
+  "yunohost": { "body": "Turnkey personal server (email included)." },
+  "startos": { "body": "Sovereign server, Tor by default." },
+  "synapse": { "body": "Your federated chat server." },
+  "bitcoin-core": { "body": "Money you hold yourself." },
+  "monero": { "body": "Private transactions by default." },
+  "securedrop": { "body": "Anonymous document drop for newsrooms." },
+  "onionshare": { "body": "Share files over Tor, no middleman." },
+  "rayhunter": { "body": "IMSI-catcher detector." },
+  "mat2": { "body": "Strips metadata before publishing." },
+  "exiftool": { "body": "Read and erase EXIF metadata." }
+}