chore(i18n): finish translating code comments and scripts to English

Completes the English-only standardization for code, comments, scripts
and CI templates (UI/CLI-facing strings stay bilingual pt-BR/en,
untouched). Covers the remaining crates/, apps/gui/ui/ and
apps/gui/src-tauri/ comments, .gitea/ workflow and template comments,
.githooks/ hooks, and the scripts/ source comments for the files
already renamed in a prior commit (check.sh, generate-logo.py,
install-hooks.sh).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VAyr8d7HuAdUGB6aA5xmDD

crates/sabia-cli/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sabia-cli"
-description = "sabia: CLI de auditoria e monitoramento de redes Wi-Fi"
+description = "Sabiá: Wi-Fi network auditing and monitoring CLI"
 version.workspace = true
 edition.workspace = true
 license.workspace = true

crates/sabia-cli/src/main.rs

@@ -16,7 +16,7 @@ use std::time::Duration;
     version
 )]
 struct Cli {
-    /// Trilha de auditoria (padrão: .sabia-audit.log).
+    /// Audit log file path (default: `.sabia-audit.log`).
     #[arg(long, global = true, default_value = ".sabia-audit.log")]
     audit: PathBuf,
 
@@ -26,95 +26,95 @@ struct Cli {
 
 #[derive(Subcommand)]
 enum Cmd {
-    /// Lista interfaces, canais e controla o modo monitor.
+    /// List interfaces, channels, and toggle monitor mode.
     Iface {
         #[command(subcommand)]
         action: IfaceAction,
     },
-    /// Captura o ar e mostra redes, clientes e handshakes.
+    /// Capture live traffic and display networks, clients, and handshakes.
     Scan {
         iface: String,
-        /// Canal fixo; sem isso, percorre os canais suportados.
+        /// Fixed channel; when omitted, hops across supported channels.
         #[arg(long)]
         channel: Option<u32>,
-        /// Banda ao percorrer canais: 2.4, 5, 6 ou all.
+        /// Frequency band when hopping channels: `2.4`, `5`, `6`, or `all`.
         #[arg(long)]
         band: Option<String>,
-        /// Tempo em cada canal (ms).
+        /// Channel dwell time in milliseconds.
         #[arg(long, default_value_t = 350)]
         hop_ms: u64,
-        /// Para a varredura depois de N segundos (padrão: até Ctrl+C).
+        /// Stop scanning after N seconds (default: run until Ctrl+C).
         #[arg(long)]
         seconds: Option<u64>,
-        /// Salva os quadros capturados em um .pcap.
+        /// Save captured frames to a `.pcap` file.
         #[arg(long)]
         out: Option<PathBuf>,
-        /// Depois de capturar, tenta quebrar o primeiro handshake.
+        /// After capturing, attempt a wordlist crack on the first handshake.
         #[arg(long, value_name = "DICIONARIO")]
         crack: Option<PathBuf>,
-        /// Mostra apenas o JSON final.
+        /// Output only the final JSON summary.
         #[arg(long)]
         json: bool,
     },
-    /// Analisa um .pcap offline (redes, clientes e handshakes).
+    /// Analyze a `.pcap` file offline (networks, clients, and handshakes).
     Analyze {
         pcap: PathBuf,
         #[arg(long)]
         json: bool,
     },
-    /// Quebra um handshake de um .pcap por dicionário.
+    /// Run a dictionary attack against a handshake in a `.pcap` file.
     Crack {
         pcap: PathBuf,
-        /// Dicionário com uma senha por linha.
+        /// Wordlist file (one candidate passphrase per line).
         #[arg(short, long)]
         wordlist: PathBuf,
         #[arg(long)]
         bssid: Option<String>,
         #[arg(long)]
         station: Option<String>,
-        /// Aplica mutações comuns a cada palavra (maiúscula, sufixos
-        /// numéricos, leet simples) — multiplica o tempo de verdade.
+        /// Apply common mutation rules to each word (capitalization, numeric
+        /// suffixes, simple leetspeak) — multiplies total runtime.
         #[arg(long)]
         rules: bool,
         #[arg(long)]
         json: bool,
     },
-    /// Envia desautenticação para um AP/estação (teste autorizado).
+    /// Send deauthentication frames to an AP/station (authorized testing only).
     Deauth {
         iface: String,
         #[arg(long)]
         bssid: String,
-        /// Sem isso, o destino é broadcast.
+        /// Target client MAC; defaults to broadcast when omitted.
         #[arg(long)]
         station: Option<String>,
         #[arg(long, default_value_t = 5)]
         count: u32,
         #[arg(long, default_value_t = 7)]
         reason: u16,
-        /// Confirma que você tem autorização para testar esta rede.
+        /// Confirm explicit authorization to test this target network.
         #[arg(long)]
         yes: bool,
     },
-    /// Diagnóstico de privilégios, ferramentas e interfaces.
+    /// Diagnose privileges, external tools, and wireless interfaces.
     Doctor {
         #[arg(long)]
         json: bool,
     },
-    /// Inspeciona a trilha de auditoria.
+    /// Inspect and verify the hash-chained audit trail.
     Audit {
         #[command(subcommand)]
         action: AuditAction,
     },
-    /// Verifica e aplica atualizações do próprio sabia.
+    /// Check for and apply `sabia` CLI updates.
     Update {
         #[arg(long)]
         apply: bool,
     },
-    /// Abre a interface gráfica (servidor local + navegador).
+    /// Launch the web UI (local HTTP server + browser).
     Ui {
         #[arg(long, default_value = "4337")]
         port: u16,
-        /// Não tenta abrir o navegador automaticamente.
+        /// Do not open the browser automatically.
         #[arg(long)]
         no_open: bool,
     },
@@ -123,13 +123,13 @@ enum Cmd {
 #[derive(Subcommand)]
 enum IfaceAction {
     List,
-    /// Mostra os canais suportados pelo rádio.
+    /// List channels supported by the wireless phy.
     Channels {
         iface: String,
         #[arg(long)]
         json: bool,
     },
-    /// Liga/desliga modo monitor numa interface Wi-Fi.
+    /// Enable or disable monitor mode on a Wi-Fi interface.
     Monitor {
         iface: String,
         #[arg(value_enum)]
@@ -139,9 +139,9 @@ enum IfaceAction {
 
 #[derive(Subcommand)]
 enum AuditAction {
-    /// Confere a integridade da cadeia.
+    /// Verify the cryptographic hash chain integrity.
     Verify { path: Option<PathBuf> },
-    /// Mostra as últimas entradas.
+    /// Show the last N entries.
     Show {
         #[arg(long, default_value_t = 20)]
         limit: usize,

crates/sabia-cli/src/web/mod.rs

@@ -1,7 +1,7 @@
-//! Servidor local da interface: uma única página HTML/JS servida em
-//! `127.0.0.1`, protegida por um token gerado na hora, falando com o
-//! núcleo por uma API JSON simples. A mesma página em `apps/gui/ui` é o
-//! que o app desktop (Tauri) carrega — só muda o transporte.
+//! Local web UI server: serves the single-page HTML/JS app on
+//! `127.0.0.1`, protected by a per-session random token, communicating with
+//! the core over JSON endpoints. The exact same frontend in `apps/gui/ui`
+//! powers the Tauri desktop app.
 
 use sabia_core::engine::{Engine, ScanOptions};
 use serde::Deserialize;
@@ -25,11 +25,11 @@ pub fn serve(port: u16, audit_path: std::path::PathBuf, open: bool) -> sabia_cor
     let listener = TcpListener::bind(("127.0.0.1", port))?;
     let engine = Arc::new(Engine::with_audit_path(audit_path));
 
-    // Sem isso, Ctrl+C (ou um `kill` normal) durante um Evil Twin ativo
-    // mata o processo sem rodar a limpeza: hostapd/dnsmasq ficam órfãos
-    // e as duas interfaces ficam presas em `managed no` pro
-    // NetworkManager — o painel de Wi-Fi do sistema some por completo até
-    // o próximo início do engine se auto-curar.
+    // Without a signal handler, Ctrl+C (or `SIGTERM`) during an active Evil Twin
+    // exits before cleanup runs: `hostapd`/`dnsmasq` are left orphaned
+    // and both interfaces remain stuck in `managed no` under
+    // NetworkManager until the next engine startup runs self-healing.
+    //
     {
         let engine = engine.clone();
         let _ = ctrlc::set_handler(move || {