feat(workspace): sealed-area names are confidential by default

The switcher listed sealed areas by name ('lbs', 'stromnetz') on
any glance or screenshot — but the names themselves often carry
client/mandate identity (usertest security finding). The sealed
section now renders one aggregated row ('2 sealed areas') with a
deliberate 'Show names' reveal per menu opening; selection still
pops the regular s:<slug> value. Settings -> Security gains 'list
sealed areas with their names right away' (WorkspacePrefs,
SidebarPrefs pattern, default off).

The aggregate row wraps to two lines — popup menus cap their
width and action texts must never be truncated (the first cut
showed '1 abgeschotte…' in the proof shot). Guard: switcher tests
cover aggregated-until-reveal and the Settings toggle; the old
direct-listing test now asserts the reveal contract. DE+EN.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

lib/l10n/app_de.arb

@@ -1799,6 +1799,11 @@
   "runsPhaseUnknown": "Unbekannt",
   "navRuns": "Läufe",
   "workspaceSealedHeader": "ABGESCHOTTETE BEREICHE",
+  "workspaceSealedAggregate": "{n, plural, =1{1 abgeschotteter Bereich} other{{n} abgeschottete Bereiche}}",
+  "@workspaceSealedAggregate": {"placeholders": {"n": {"type": "int"}}},
+  "workspaceSealedRevealAction": "Namen einblenden",
+  "settingsSealedNamesTitle": "Abgeschottete Bereiche direkt mit Namen anzeigen",
+  "settingsSealedNamesBody": "Bereichsnamen können schutzwürdig sein (Kunden-/Mandantenbezug). Standardmäßig zeigt der Projekt-Umschalter sie nur zusammengefasst; die Namen erscheinen erst nach einem Klick.",
   "workspaceSealedRunning": "läuft",
   "workspaceSealedStopped": "gestoppt",
   "workspaceSealedRunningHint": "Der abgeschottete Bereich läuft als eigener Hub-Prozess. Auswählen wechselt hinein.",

lib/l10n/app_en.arb

@@ -1838,6 +1838,11 @@
   "runsPhaseUnknown": "Unknown",
   "navRuns": "Runs",
   "workspaceSealedHeader": "SEALED AREAS",
+  "workspaceSealedAggregate": "{n, plural, =1{1 sealed area} other{{n} sealed areas}}",
+  "@workspaceSealedAggregate": {"placeholders": {"n": {"type": "int"}}},
+  "workspaceSealedRevealAction": "Show names",
+  "settingsSealedNamesTitle": "List sealed areas with their names right away",
+  "settingsSealedNamesBody": "Area names can be sensitive (client/mandate identity). By default the workspace switcher shows them aggregated; the names appear only after a click.",
   "workspaceSealedRunning": "running",
   "workspaceSealedStopped": "stopped",
   "workspaceSealedRunningHint": "The sealed area runs as its own hub process. Selecting it switches in.",

lib/l10n/app_localizations.dart

@@ -5545,6 +5545,30 @@ abstract class AppLocalizations {
   /// **'SEALED AREAS'**
   String get workspaceSealedHeader;
 
+  /// No description provided for @workspaceSealedAggregate.
+  ///
+  /// In en, this message translates to:
+  /// **'{n, plural, =1{1 sealed area} other{{n} sealed areas}}'**
+  String workspaceSealedAggregate(int n);
+
+  /// No description provided for @workspaceSealedRevealAction.
+  ///
+  /// In en, this message translates to:
+  /// **'Show names'**
+  String get workspaceSealedRevealAction;
+
+  /// No description provided for @settingsSealedNamesTitle.
+  ///
+  /// In en, this message translates to:
+  /// **'List sealed areas with their names right away'**
+  String get settingsSealedNamesTitle;
+
+  /// No description provided for @settingsSealedNamesBody.
+  ///
+  /// In en, this message translates to:
+  /// **'Area names can be sensitive (client/mandate identity). By default the workspace switcher shows them aggregated; the names appear only after a click.'**
+  String get settingsSealedNamesBody;
+
   /// No description provided for @workspaceSealedRunning.
   ///
   /// In en, this message translates to:

lib/l10n/app_localizations_de.dart

@@ -3280,6 +3280,28 @@ class AppLocalizationsDe extends AppLocalizations {
   @override
   String get workspaceSealedHeader => 'ABGESCHOTTETE BEREICHE';
 
+  @override
+  String workspaceSealedAggregate(int n) {
+    String _temp0 = intl.Intl.pluralLogic(
+      n,
+      locale: localeName,
+      other: '$n abgeschottete Bereiche',
+      one: '1 abgeschotteter Bereich',
+    );
+    return '$_temp0';
+  }
+
+  @override
+  String get workspaceSealedRevealAction => 'Namen einblenden';
+
+  @override
+  String get settingsSealedNamesTitle =>
+      'Abgeschottete Bereiche direkt mit Namen anzeigen';
+
+  @override
+  String get settingsSealedNamesBody =>
+      'Bereichsnamen können schutzwürdig sein (Kunden-/Mandantenbezug). Standardmäßig zeigt der Projekt-Umschalter sie nur zusammengefasst; die Namen erscheinen erst nach einem Klick.';
+
   @override
   String get workspaceSealedRunning => 'läuft';
 

lib/l10n/app_localizations_en.dart

@@ -3274,6 +3274,28 @@ class AppLocalizationsEn extends AppLocalizations {
   @override
   String get workspaceSealedHeader => 'SEALED AREAS';
 
+  @override
+  String workspaceSealedAggregate(int n) {
+    String _temp0 = intl.Intl.pluralLogic(
+      n,
+      locale: localeName,
+      other: '$n sealed areas',
+      one: '1 sealed area',
+    );
+    return '$_temp0';
+  }
+
+  @override
+  String get workspaceSealedRevealAction => 'Show names';
+
+  @override
+  String get settingsSealedNamesTitle =>
+      'List sealed areas with their names right away';
+
+  @override
+  String get settingsSealedNamesBody =>
+      'Area names can be sensitive (client/mandate identity). By default the workspace switcher shows them aggregated; the names appear only after a click.';
+
   @override
   String get workspaceSealedRunning => 'running';