refactor: migrate frontend to React + Tailwind, add Docker + tests

Replace the vanilla-TS innerHTML frontend with a type-checked React
component tree (React 19 + Tailwind v4 + Vite).

Frontend:
- 14 components: Header, Stepper, LoginPage, LoginModal, SignPage,
  DropZone, DevicePicker, ProgressCard, SavedAccountsList, TrustModal,
  TwoFactorModal, Button, Field, Chip, Modal
- lib/ extracts: storage (10 localStorage keys preserved), pair-record,
  account-session, log-parser, ids, use-log hook
- flows/ encapsulate async pair/login/sign/install with dependency injection
- Accounts page as main view with Add Account modal
- Fullscreen progress overlay during sign/install
- Account selector + device picker on Sign page
- Security notice in login modal (server trust warning)
- All addLog calls mirrored to console.log for devtools debugging

Build:
- bun run dev: submodule init + install + wasm dist + vite + wrangler
- bun run setup: one-shot project bootstrap
- Docker: multi-stage bun build → nginx on :3000
- build:wasm:dist copies pre-built src→dist (no Rust/Emscripten needed)
- jszip/node-forge/fflate pre-bundled for CJS→ESM conversion

Tests:
- 163 vitest tests (happy-dom): all lib, components, App integration,
  WASM dist artifact checks, libcurl Apple connectivity, anisette init
  error handling

Cleanup:
- Delete yarn.lock (bun.lock canonical), expand .gitignore
- Remove README.zh.md, rewrite README.md + AGENTS.md
- Update libcurl.js submodule to f65d440 (CI build artifacts)

frontend/src/components/Header.test.tsx

@@ -0,0 +1,32 @@
+import { render, screen } from '@testing-library/react';
+import userEvent from '@testing-library/user-event';
+import { describe, expect, it, vi } from 'vitest';
+import { Header } from './Header';
+
+describe('Header', () => {
+  it('reflects the active page via data-active', () => {
+    render(<Header currentPage="login" onNavigate={() => {}} />);
+    expect(screen.getByRole('button', { name: 'Account' })).toHaveAttribute('data-active', 'true');
+    expect(screen.getByRole('button', { name: /Sign & Install/ })).toHaveAttribute('data-active', 'false');
+  });
+
+  it('calls onNavigate when clicking the nav buttons', async () => {
+    const onNav = vi.fn();
+    render(<Header currentPage="login" onNavigate={onNav} />);
+    await userEvent.click(screen.getByRole('button', { name: /Sign & Install/ }));
+    expect(onNav).toHaveBeenCalledWith('sign');
+
+    await userEvent.click(screen.getByRole('button', { name: 'Account' }));
+    expect(onNav).toHaveBeenCalledWith('login');
+  });
+
+  it('wordmark click also navigates to login (and prevents the anchor default)', async () => {
+    const onNav = vi.fn();
+    render(<Header currentPage="sign" onNavigate={onNav} />);
+    const link = screen.getByRole('link', { name: /AltStore Web/ });
+    await userEvent.click(link);
+    expect(onNav).toHaveBeenCalledWith('login');
+    // Hash should not have been mutated by the default anchor behavior.
+    expect(window.location.hash).toBe('');
+  });
+});