feat(studio): Welcome page Phase B — embedded doc reader (v0.38.0)

Second slice of the Welcome surface. Operator-facing
documentation now lives inside Studio as bundled assets and
renders inline via a modal sheet — no browser, no external
link, air-gap-tauglich.

- Four operator-readable explainers under `assets/docs/`,
  each with an EN + DE pair:
    architecture[_de].md  — Hub / Module / Flow + how they fit
    security[_de].md       — sandbox model, declared perms,
                              operator ceiling
    audit[_de].md          — hash-chained log, WORM-1 mechanics,
                              `fai admin verify-events`
    flows[_de].md          — flow YAML, templating reference,
                              extract→summarize example
  These are short (≈ 300-500 words each), operator-shaped
  prose. Not copies of the architecture docs in
  fai_platform/docs/architecture/ — those are
  contributor-dense.

- pubspec.yaml declares `assets/docs/` so the markdown ships
  inside the Studio binary. Air-gap deployments read them
  with no network access.

- New `_DocReaderSheet` modal: 85 %-of-viewport bottom sheet,
  drag handle + title bar with the doc icon and close button,
  scrollable Markdown body styled to match Studio chrome.
  Loads `assets/docs/<slug>_<locale>.md` first, falls back to
  the EN file. Locale comes from
  `Localizations.localeOf(context)`.

- `_DocsRow` on the Welcome page sits below the trust-posture
  deck. Two-column grid on ≥ 640 dp, single column below.
  Each card is icon + title + one-line blurb + chevron;
  click opens the reader sheet for that slug.

- 12 new ARB keys for the docs section (header, blurb, four
  card titles + blurbs, close button, error message).
- 4 new icons reused: `account_tree_outlined` (architecture),
  `shield_outlined` (security), `verified_outlined` (audit),
  `alt_route_outlined` (flows).

Implements Phase B of `docs/landing-page-design.md`. Phase C
(live getting-started checklist with persistent state) is the
last remaining slice.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

lib/l10n/app_localizations.dart

@@ -206,6 +206,78 @@ abstract class AppLocalizations {
   /// **'The whole hub fits in a single binary that runs on Linux, macOS and Windows. Once a module is installed, the flow it powers runs without further network access — perfect for regulated environments.'**
   String get welcomeTrustAirgapBody;
 
+  /// No description provided for @welcomeDocsHeader.
+  ///
+  /// In en, this message translates to:
+  /// **'DOCUMENTATION'**
+  String get welcomeDocsHeader;
+
+  /// No description provided for @welcomeDocsBody.
+  ///
+  /// In en, this message translates to:
+  /// **'Operator-facing explainers, rendered inline. No browser, no external link — air-gap-friendly.'**
+  String get welcomeDocsBody;
+
+  /// No description provided for @welcomeDocArchitectureTitle.
+  ///
+  /// In en, this message translates to:
+  /// **'Architecture in one paragraph'**
+  String get welcomeDocArchitectureTitle;
+
+  /// No description provided for @welcomeDocArchitectureBlurb.
+  ///
+  /// In en, this message translates to:
+  /// **'Hub, Module, Flow — and how the three fit together.'**
+  String get welcomeDocArchitectureBlurb;
+
+  /// No description provided for @welcomeDocSecurityTitle.
+  ///
+  /// In en, this message translates to:
+  /// **'Sandbox model'**
+  String get welcomeDocSecurityTitle;
+
+  /// No description provided for @welcomeDocSecurityBlurb.
+  ///
+  /// In en, this message translates to:
+  /// **'What a module declares, what the operator caps, what the hub enforces.'**
+  String get welcomeDocSecurityBlurb;
+
+  /// No description provided for @welcomeDocAuditTitle.
+  ///
+  /// In en, this message translates to:
+  /// **'Tamper-evident audit log'**
+  String get welcomeDocAuditTitle;
+
+  /// No description provided for @welcomeDocAuditBlurb.
+  ///
+  /// In en, this message translates to:
+  /// **'How the hash chain works and why WORM-1 is enough for KRITIS.'**
+  String get welcomeDocAuditBlurb;
+
+  /// No description provided for @welcomeDocFlowsTitle.
+  ///
+  /// In en, this message translates to:
+  /// **'Flow composition'**
+  String get welcomeDocFlowsTitle;
+
+  /// No description provided for @welcomeDocFlowsBlurb.
+  ///
+  /// In en, this message translates to:
+  /// **'YAML basics, templating reference, the extract→summarize example.'**
+  String get welcomeDocFlowsBlurb;
+
+  /// No description provided for @welcomeDocClose.
+  ///
+  /// In en, this message translates to:
+  /// **'Close'**
+  String get welcomeDocClose;
+
+  /// No description provided for @welcomeDocFailedToLoad.
+  ///
+  /// In en, this message translates to:
+  /// **'Could not load documentation: {error}'**
+  String welcomeDocFailedToLoad(String error);
+
   /// No description provided for @navDoctor.
   ///
   /// In en, this message translates to: