cards: group the form into SCP80/SCP81 fieldsets, close the RU i18n gaps (v2.2.19)

- The card create/edit form now surrounds the SCP80 parameters (KIc/KID,
  SPI1/SPI2, TAR, counter, keys) with a bordered <fieldset> labelled
  'SCP80 (GSM 03.48, ETSI TS 102 225)' and the PSK pair (with the listener
  explanation) with one labelled 'SCP81 (HTTP OTA)'; the name/ICCID row and
  the list stay outside the groups.
- i18n: the SCP81 PSK note is translated now, plus the keys an audit found
  missing from the RU dictionary (Start, Clear, Loading..., Working...,
  APDU hex, CAP file (max 48 kB), Install from .cap, Card reader server is
  not connected, KIc/KID required messages, Memory (GET DATA FF21), the two
  no-secured-packet alerts, Select, event notification to the card?).
- Tests: html.test.js guards both fieldsets, their legends and that the PSK
  note and fields live inside the SCP81 group (401 frontend tests).
- Docs: help EN+RU Cards intro. SW cache otaman-v186.

frontend/tests/html.test.js

@@ -25,6 +25,21 @@ test('cards list shows the SCP81 PSK column with blue/red row buttons', () => {
     assert.match(fn[0], /cardsRemove\(' \+ i \+ '\)" class="[^"]*bg-red-600 text-white/);
 });
 
+test('the card form groups the SCP80 and SCP81 fields into labelled fieldsets', () => {
+    const fieldsets = [...html.matchAll(/<fieldset[\s\S]*?<\/fieldset>/g)].map(m => m[0]);
+    assert.strictEqual(fieldsets.length, 2);
+    assert.match(fieldsets[0], /<legend[^>]*data-l10n="SCP80 \(GSM 03\.48, ETSI TS 102 225\)"/);
+    assert.match(fieldsets[0], /id="cards-kic"/);
+    assert.match(fieldsets[0], /id="cards-kid-key"/);
+    assert.match(fieldsets[1], /<legend[^>]*data-l10n="SCP81 \(HTTP OTA\)"/);
+    assert.match(fieldsets[1], /id="cards-psk-id"/);
+    assert.match(fieldsets[1], /id="cards-psk-key"/);
+    // the PSK explanation lives inside the SCP81 group, not outside it
+    assert.match(fieldsets[1], /data-l10n="SCP81 HTTP OTA: the listener picks the key/);
+    // the ICCID field is not in either group
+    assert.ok(!fieldsets.some(f => f.includes('id="cards-iccid"')));
+});
+
 test('PLI qualifier tables cover all standard qualifiers', () => {
     // ESN (07), MEID (0B) and Supported RATs (1A) must at least be named, in
     // both the TR Config dictionary and the proactive-log short labels.