feat(amneziawg): complete frontend parity for the Inbounds list page

The Clients page (form, CRUD, QR/config) already worked from the
prior commit; this closes the remaining gap on the Inbounds side and
in a couple of protocol allowlists that a plain search for existing
wireguard/mtproto handling turned up.

lib/xray/inbound-link.ts gets amneziawg-specific link/config builders
(genAmneziaWGLink/genAmneziaWGConfig, plus the *s fan-out variants)
mirroring the wireguard ones — AmneziaWG has no legacy peers-array to
fall back to, so these read settings.clients directly and add the
obfuscation lines every client must share with the server. Wired into
genInboundLinks generically, and into three consumers that call the
wireguard builders directly rather than through that dispatcher:
QrCodeModal, InboundInfoModal, and InboundsPage's bulk export.

ClientInfoModal, ClientBulkAddModal, and the bulk attach/detach modals
each had their own protocol allowlist that needed amneziawg added
alongside wireguard/mtproto.

Two real gaps surfaced by grepping every remaining 'wireguard' /
Protocols.WIREGUARD hit in frontend/src rather than trusting the
checklist was exhaustive:
- useInbounds.ts's TRACKED_PROTOCOLS gates the deactive/depleted/
  expiring/online client counts shown per inbound on the list page;
  without amneziawg those counts would silently read zero.
- inbound-tag.ts is an explicit client-side mirror of the Go backend's
  port_conflict.go (the file says so itself: "Keep in sync"). It still
  only special-cased wireguard for UDP, so an amneziawg inbound would
  have fallen through to the TCP default and disagreed with the
  backend's own port-conflict math.

Also finishes translating the AmneziaWG UI strings into the 11 locale
files that were still falling back to English (ar-EG, es-ES, fa-IR,
id-ID, ja-JP, pt-BR, tr-TR, uk-UA, vi-VN, zh-CN, zh-TW), matching
en-US/ru-RU key-for-key (26 new keys, verified by count in every file).

Not run anywhere: npm run typecheck / build. This machine has neither
Node nor npm, so nothing here has compiled — reviewed by hand plus
brace/paren balance checks and cross-referencing the generated Zod/TS
types. Treat this as needing a real typecheck before shipping.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

internal/web/translation/fa-IR.json

@@ -915,6 +915,12 @@
       "wireguardPreSharedKey": "کلید پیش‌اشتراکی وایرگارد",
       "wireguardAllowedIPs": "آی‌پی‌های مجاز وایرگارد",
       "wireguardAllowedIPsHint": "برای تخصیص خودکار خالی بگذارید؛ ورودی‌ها را با کاما جدا کنید",
+      "amneziaWgPrivateKey": "کلید خصوصی AmneziaWG",
+      "amneziaWgPublicKey": "کلید عمومی AmneziaWG",
+      "amneziaWgPreSharedKey": "کلید پیش‌اشتراکی AmneziaWG",
+      "amneziaWgAllowedIPs": "آی‌پی‌های مجاز AmneziaWG",
+      "amneziaWgAllowedIPsHint": "برای تخصیص خودکار خالی بگذارید؛ ورودی‌ها را با کاما جدا کنید",
+      "amneziaWgConfig": "پیکربندی AmneziaWG",
       "mtprotoSecret": "سکرت MTProto",
       "mtprotoSecretHint": "سکرت FakeTLS این کلاینت. برای تعویض، دوباره تولید کنید.",
       "mtprotoAdTag": "برچسب تبلیغاتی (کانال حامی)",
@@ -1800,6 +1806,31 @@
         "psk": "کلید مشترک",
         "domainStrategy": "استراتژی حل دامنه"
       },
+      "amneziawg": {
+        "privateKey": "کلید خصوصی",
+        "publicKey": "کلید عمومی",
+        "subnetIp": "زیرشبکه",
+        "subnetCidr": "پیشوند زیرشبکه (CIDR)",
+        "mtu": "MTU",
+        "primaryDns": "DNS اصلی",
+        "secondaryDns": "DNS ثانویه",
+        "externalInterface": "رابط خارجی",
+        "externalInterfaceHint": "رابط شبکه میزبان برای NAT (PostUp/PostDown). برای تشخیص خودکار خالی بگذارید.",
+        "jc": "Jc (تعداد بسته‌های زباله)",
+        "jmin": "Jmin (حداقل اندازه بسته زباله)",
+        "jmax": "Jmax (حداکثر اندازه بسته زباله)",
+        "s1": "S1 (اندازه پرکننده بسته init)",
+        "s2": "S2 (اندازه پرکننده بسته response)",
+        "s3": "S3 (پرکننده cookie reply، نسخه ۲.۰)",
+        "s4": "S4 (پرکننده بسته انتقال، نسخه ۲.۰)",
+        "h1": "H1 (سرصفحه جادویی)",
+        "h2": "H2 (سرصفحه جادویی)",
+        "h3": "H3 (سرصفحه جادویی)",
+        "h4": "H4 (سرصفحه جادویی)",
+        "hHint": "یک عدد صحیح یا یک بازه. برای مقادیر پیش‌فرض کلاسیک ۱/۲/۳/۴ خالی بگذارید.",
+        "i1": "I1 (بسته امضا، نسخه ۲.۰)",
+        "i1Hint": "فقط برای AmneziaWG 2.0. برای سازگاری با نسخه ۱.x خالی بگذارید."
+      },
       "tun": {
         "nameDesc": "نام رابط TUN. مقدار پیش‌فرض 'xray0' است",
         "mtuDesc": "واحد انتقال حداکثر. بیشترین اندازه بسته‌های داده. مقدار پیش‌فرض 1500 است",