chore(i18n): finish translating code comments and scripts to English

Completes the English-only standardization for code, comments, scripts
and CI templates (UI/CLI-facing strings stay bilingual pt-BR/en,
untouched). Covers the remaining crates/, apps/gui/ui/ and
apps/gui/src-tauri/ comments, .gitea/ workflow and template comments,
.githooks/ hooks, and the scripts/ source comments for the files
already renamed in a prior commit (check.sh, generate-logo.py,
install-hooks.sh).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD

crates/guara-core/src/crypt/filevault.rs

@@ -1,5 +1,5 @@
-//! FileVault 2 sobre Core Storage (volumes HFS+ cifrados do macOS 10.7 a 10.12 e Fusion Drives).
-//! Senha ou chave do volume; chave de recuperação institucional não é suportada.
+//! FileVault 2 on Core Storage (encrypted HFS+ volumes from macOS 10.7–10.12 and Fusion Drives).
+//! Supports user password or volume key; institutional recovery keys are not supported.
 
 use super::*;
 use crate::source::{read_vec, SubSource};
@@ -18,7 +18,7 @@ pub fn detect(head: &[u8]) -> bool {
     head.len() >= 512 && head[88] == 0x43 && head[89] == 0x53 && head[10] == 0x10
 }
 
-/// Desembrulha uma chave AES-128 de 24 bytes (RFC 3394).
+/// Unwraps a 24-byte AES-128 key (RFC 3394).
 fn unwrap_key(kek: &[u8], wrapped: &[u8]) -> Option<[u8; 16]> {
     let aes = AesAny::new(kek)?;
     if wrapped.len() != 24 {
@@ -73,7 +73,7 @@ fn b64(s: &str) -> Option<Vec<u8>> {
     Some(out)
 }
 
-/// Valor de `<key>NOME</key><tipo ...>VALOR</tipo>` num plist simples (primeira ocorrência com valor).
+/// Extracts the value of `<key>NAME</key><type ...>VALUE</type>` from a simple XML plist.
 fn plist_value(xml: &str, key: &str) -> Option<String> {
     let k = format!("<key>{key}</key>");
     let mut from = 0;
@@ -163,7 +163,7 @@ pub fn unlock(src: Arc<dyn Source>, secrets: &[Secret]) -> UnlockResult {
         if b.len() < MD_BLOCK || b.iter().all(|&x| x == 0) {
             break;
         }
-        // XTS sobre o bloco inteiro, com o número do bloco como ajuste inicial.
+        // XTS across the full block, using the block number as the initial tweak.
         md_cipher.decrypt_sector(&mut b, i, 0);
         match u16::from_le_bytes([b[10], b[11]]) {
             0x0019 => {