chore: sign s3 (#170)

Signed-off-by: Innei <tukon479@gmail.com>

locales/dashboard/en.json

@@ -295,7 +295,7 @@
   "photos.storage.managed.price.free": "Included in your current plan",
   "photos.storage.managed.price.label": "{{price}} / month",
   "photos.storage.managed.provider": "Backed by provider {{provider}}",
-  "photos.storage.managed.title": "Managed storage",
+  "photos.storage.managed.title": "Managed Storage",
   "photos.storage.managed.toast.checkout-failure": "Unable to start checkout, please try again.",
   "photos.storage.managed.toast.checkout-unavailable": "Managed storage checkout is unavailable right now.",
   "photos.storage.managed.toast.error": "Failed to update managed storage: {{reason}}",
@@ -671,9 +671,13 @@
   "storage.providers.prompt.sync.confirm": "Start syncing",
   "storage.providers.prompt.sync.description": "Storage provider configuration is saved. Go to Data Sync now to scan storage and update the database?",
   "storage.providers.prompt.sync.title": "Sync photos now?",
+  "storage.providers.secure-access.description": "Serve downloads via short-lived, presigned URLs so you can revoke access and trace requests. Disable to fall back to direct bucket URLs (less secure).",
+  "storage.providers.secure-access.helper": "Recommended for managed storage or when you need detailed access logs. Requires S3 credentials that allow presigned downloads.",
+  "storage.providers.secure-access.managed-note": "Managed tenants follow the platform-wide policy controlled by the super admin.",
+  "storage.providers.secure-access.title": "Secure Access Proxy",
   "storage.providers.security.description": "Sensitive credentials (keys, tokens, etc.) are encrypted with {{algorithm}} to protect your data.",
   "storage.providers.security.helper": "{{algorithm}} provides authenticated encryption to keep data confidential and tamper-proof.",
-  "storage.providers.security.title": "Storage security",
+  "storage.providers.security.title": "Storage Security",
   "storage.providers.status.dirty": "{{total}} provider(s) pending save",
   "storage.providers.status.error": "Save failed: {{reason}}",
   "storage.providers.status.saved": "✓ Storage configuration saved",
@@ -794,6 +798,9 @@
   "superadmin.settings.managed-storage.description": "Configure the storage provider used for built-in managed storage (e.g., B2).",
   "superadmin.settings.managed-storage.empty": "No storage providers yet. Add one to use as managed storage.",
   "superadmin.settings.managed-storage.error": "Failed to load storage providers: {{reason}}",
+  "superadmin.settings.managed-storage.secure-access.description": "Force managed tenants to serve downloads through presigned URLs for access control and tracing.",
+  "superadmin.settings.managed-storage.secure-access.helper": "Disabling this exposes raw object-storage URLs to every managed tenant.",
+  "superadmin.settings.managed-storage.secure-access.title": "Secure access proxy",
   "superadmin.settings.managed-storage.title": "Managed storage provider",
   "superadmin.settings.managed-storage.type": "Type: {{type}}",
   "superadmin.settings.message.dirty": "You have unsaved changes",
@@ -806,7 +813,7 @@
   "superadmin.settings.stats.total-users": "Total users",
   "superadmin.settings.stats.unlimited": "Unlimited",
   "superadmin.settings.tabs.general": "General",
-  "superadmin.settings.tabs.managed-storage": "Managed storage",
+  "superadmin.settings.tabs.managed-storage": "Managed Storage",
   "superadmin.settings.title": "System Settings",
   "superadmin.tenants.button.ban": "Ban",
   "superadmin.tenants.button.processing": "Working…",
@@ -857,4 +864,4 @@
   "welcome.tenant-restricted.register": "Create a new space",
   "welcome.tenant-restricted.request": "Requested host:",
   "welcome.tenant-restricted.title": "Space Reserved"
-}
+}

locales/dashboard/zh-CN.json

@@ -670,6 +670,10 @@
   "storage.providers.prompt.sync.confirm": "开始同步",
   "storage.providers.prompt.sync.description": "存储提供方配置已保存。是否立即前往数据同步，扫描存储并更新数据库？",
   "storage.providers.prompt.sync.title": "立即同步照片？",
+  "storage.providers.secure-access.description": "启用后将通过服务端生成短期签名链接，便于追踪与及时吊销；关闭则使用公开地址（安全性更低）。",
+  "storage.providers.secure-access.helper": "建议在托管存储或需要访问日志时开启，需要具备 S3 的签名下载权限。",
+  "storage.providers.secure-access.managed-note": "托管存储由平台统一控制此选项，如需调整请联系管理员。",
+  "storage.providers.secure-access.title": "安全访问代理",
   "storage.providers.security.description": "密钥、令牌等敏感凭据会使用 {{algorithm}} 加密以保护数据。",
   "storage.providers.security.helper": "{{algorithm}} 提供认证加密，确保数据保密且不可篡改。",
   "storage.providers.security.title": "存储安全",
@@ -793,6 +797,9 @@
   "superadmin.settings.managed-storage.description": "配置用于内置托管存储的 Provider（例如 B2）。",
   "superadmin.settings.managed-storage.empty": "还没有存储提供商，请先新增。",
   "superadmin.settings.managed-storage.error": "加载存储提供商失败：{{reason}}",
+  "superadmin.settings.managed-storage.secure-access.description": "是否强制托管租户通过短期签名链接访问，以便控制与追踪。",
+  "superadmin.settings.managed-storage.secure-access.helper": "关闭后租户将直接返回对象存储地址，安全性会降低。",
+  "superadmin.settings.managed-storage.secure-access.title": "安全访问代理",
   "superadmin.settings.managed-storage.title": "托管存储 Provider",
   "superadmin.settings.managed-storage.type": "类型：{{type}}",
   "superadmin.settings.message.dirty": "您有尚未保存的变更",
@@ -849,4 +856,4 @@
   "welcome.tenant-restricted.register": "创建新空间",
   "welcome.tenant-restricted.request": "请求的主机：",
   "welcome.tenant-restricted.title": "空间已被保留"
-}
+}