feat(editor): F4.5d the firewall in the device sheet

Measured first: SheetRun drives FILIUS' firewall dialog down to its table
editor (Swing's own end of an edit). Java's table writes a cell into the
rule before it checks it, so that the firewall holds "abc", a mask of
255.0.255.0 or port 0 while the table shows the old value, and reads a
port that is no number as all ports. Here nothing the check refuses
reaches the rule.

- doc: the three switches, the default action, rules (new as Java's,
  cells by Java's checks: masks of ones then zeros, the directly connected
  marker as a source only, an empty port for all ports; protocol, action,
  moved up or down, removed)
- editor: the firewall as a page of the router's and home router's sheet,
  with Java's explanations; the general tab named so (Java: "network
  interfaces")

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

packages/editor/test/i18n.test.ts

@@ -85,6 +85,26 @@ const FROM_JAVA: Readonly<Record<string, string>> = {
   'forwarding.publicPortValue': 'jportforwarding_msg5',
   'forwarding.lanIPAddress': 'jportforwarding_msg6',
   'forwarding.lanPortValue': 'jportforwarding_msg7',
+  'sheet.firewall': 'jvermittlungsrechnerkonfiguration_msg4',
+  'firewall.rules': 'jfirewalldialog_msg21',
+  'firewall.up': 'jfirewalldialog_msg22',
+  'firewall.down': 'jfirewalldialog_msg23',
+  'firewall.add': 'jfirewalldialog_msg24',
+  'firewall.delete': 'jfirewalldialog_msg25',
+  'firewall.number': 'jfirewalldialog_msg26',
+  'firewall.sourceIPAddress': 'jfirewalldialog_msg27',
+  'firewall.sourceSubnetMask': 'jfirewalldialog_msg28',
+  'firewall.destinationIPAddress': 'jfirewalldialog_msg29',
+  'firewall.destinationSubnetMask': 'jfirewalldialog_msg30',
+  'firewall.protocol': 'jfirewalldialog_msg31',
+  'firewall.accept': 'jfirewalldialog_msg33',
+  'firewall.drop': 'jfirewalldialog_msg34',
+  'firewall.port': 'jfirewalldialog_msg35',
+  'firewall.active': 'jfirewalldialog_msg38',
+  'firewall.activeHint': 'jfirewalldialog_msg39',
+  'firewall.dropIcmp': 'jfirewalldialog_msg40',
+  'firewall.dropIcmpHint': 'jfirewalldialog_msg41',
+  'firewall.filterSyn': 'jfirewalldialog_msg42',
 };
 
 /** Java's words, mended: the prompt says "Vermittlungsrechnerns" (guicontainer_msg1). */
@@ -97,6 +117,13 @@ const FROM_JAVA_MENDED: Readonly<Record<string, readonly [string, (java: string)
   // Java's word, then what it joins or which card.
   'sheet.connectedTo': ['jvermittlungsrechnerkonfiguration_msg6', (java) => `${java} {device}`],
   'sheet.nic': ['jvermittlungsrechnerkonfiguration_msg10', (java) => `${java} {number}`],
+  // A column's title without Java's question mark ("Aktion?").
+  'firewall.action': ['jfirewalldialog_msg32', (java) => java.replace(/\?$/, '')],
+  // A label above its list, without the colon.
+  'firewall.defaultPolicy': ['jfirewalldialog_msg36', (java) => java.replace(/:$/, '')],
+  // Java's "\n" as line breaks; the last sentence of the German starts with a small letter there.
+  'firewall.intro': ['jfirewalldialog_msg37', (java) => java.replaceAll('\\n', '\n').replace('\nüber', '\nÜber')],
+  'firewall.filterSynHint': ['jfirewalldialog_msg43', (java) => java.replaceAll('\\n', '\n')],
 };
 
 describe('the catalogs', () => {