feat(render+node-agent+admin): install fonts on all render nodes + verify

Push a font once → every node installs it → admin sees per-node status.

- render-svc: font_requests + node_fonts tables (mig 25); admin GET/POST/DELETE
  /v1/node-fonts (with per-node status matrix); internal (HMAC) GET pending +
  POST status for node-agents
- node-agent: fontSyncLoop polls pending fonts every 60s, downloads, installs
  (Windows Fonts dir + registry / macOS / linux fc-cache), reports Installed/Failed
- gateway: /v1/node-fonts/* → render
- admin /admin/node-fonts: upload a .ttf/.otf → install on all nodes; per-node
  Installed/Pending/Failed badges + counts + delete

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/app/[locale]/admin/layout.tsx

@@ -40,6 +40,7 @@ export default async function AdminLayout({
     { href: "/admin/discounts", label: t("discounts") },
     { href: "/admin/settings", label: t("siteSettings") },
     { href: "/admin/nodes", label: t("nodes") },
+    { href: "/admin/node-fonts", label: t("nodeFonts") },
     { href: "/admin/renders", label: t("renderQueue") },
   ];
   return (

src/app/[locale]/admin/node-fonts/page.tsx

@@ -0,0 +1,7 @@
+"use client";
+
+import { NodeFontsAdmin } from "@/components/admin/NodeFontsAdmin";
+
+export default function Page() {
+  return <NodeFontsAdmin />;
+}