feat(storage): restore quarantined archived sessions (phase 2.1 of #42)

[Wibias]

Summary

• Add GET /api/storage/trash and POST /api/storage/trash/restore to list and restore Phase 2 quarantine entries under CODEX_HOME/.trash/<epoch>/ (relative paths only).
• Restore moves JSONL files back to archived paths, re-inserts threads (+ satellites when satellite-backup.json is present), removes the trash entry on success, and returns 409 when Codex DBs are busy.
• Storage page Quarantine panel with Restore + confirm, i18n for all locales that already had storage keys, and docs note that quarantine is restorable from the dashboard.

Closes part of #42 (Phase 2.1 only — no Phase 3 auto-policy/purge).

Test plan

• bun test --isolate for storage-cleanup, api-storage-cleanup, api-storage, storage-scanner
• bun run typecheck
• Manual: quarantine an archived session on Storage, confirm it appears under Quarantine, Restore, verify JSONL + thread return
• Manual: with Codex holding state_*.sqlite, confirm restore returns busy / 409

Summary by CodeRabbit

• New Features

  • Added an in-app Quarantine section to the Storage page.
  • Users can review quarantined entries and restore selected files and threads.
  • Added clear restore confirmations, status updates, and error messages.

• Bug Fixes

  • Prevented cleanup and restoration while active storage data is locked.
  • Added safeguards for invalid entries, missing data, and destination conflicts.

• Documentation

  • Updated web dashboard guidance across supported languages to reflect in-app quarantine restoration.