chore(i18n): finish translating code comments and scripts to English

Completes the English-only standardization for code, comments, scripts
and CI templates (UI/CLI-facing strings stay bilingual pt-BR/en,
untouched). Covers the remaining crates/, apps/gui/ui/ and
apps/gui/src-tauri/ comments, .gitea/ workflow and template comments,
.githooks/ hooks, and the scripts/ source comments for the files
already renamed in a prior commit (check.sh, generate-logo.py,
install-hooks.sh).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD

crates/guara-core/tests/luks.rs

@@ -1,5 +1,5 @@
-//! LUKS1/LUKS2: imagens criadas pelo cryptsetup; o conteúdo é cifrado por uma
-//! implementação independente (python cryptography) com a chave real do volume.
+//! LUKS1/LUKS2: headers formatted by `cryptsetup` with payload sectors encrypted by an
+//! independent implementation (`python3-cryptography`) using the volume's master key.
 
 use guara_core::crypt::{luks, Secret, UnlockError};
 use guara_core::source::{read_vec, FileSource, Source};
@@ -136,7 +136,7 @@ fn run_case(c: &Case) {
     assert!(st.success());
 
     let src: Arc<dyn Source> = Arc::new(FileSource::open(&img).unwrap());
-    // Senha errada primeiro.
+    // Wrong password is ignored when followed by the right password.
     match luks::unlock(src.clone(), &[Secret::Password("errada".into())]) {
         Err(UnlockError::WrongSecret) => {}
         Err(e) => panic!("{}: erro inesperado {e}", c.name),
@@ -149,7 +149,7 @@ fn run_case(c: &Case) {
     .unwrap_or_else(|e| panic!("{}: {e}", c.name));
     let got = read_vec(u.source.as_ref(), 0, data.len()).unwrap();
     assert!(got == data, "{}: conteúdo difere", c.name);
-    // Também abre com a chave do volume.
+    // Also unlocks directly via the hex-encoded volume master key.
     let vk = std::fs::read(&vkf).unwrap();
     let u2 = luks::unlock(src, &[Secret::VolumeKey(vk)]).unwrap();
     assert_eq!(