feat(konto): settings page for security and privacy

Adds /konto/einstellungen, which gathers two-factor authentication,
"sign out on all devices", the Erntepost consent, the data export
(Art. 15 GDPR) and account deletion (Art. 17 GDPR) in one place.
The account overview now links there through a "Settings" card
instead of listing these blocks inline. Server actions are unchanged
apart from redirecting failures and revalidating the new page.

Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>

src/i18n/dictionaries/en.ts

@@ -708,7 +708,7 @@ export const en: Dictionary = {
   twoFactorPage: {
     title: "Two-Factor Authentication",
     subtitle: "Protects your account beyond just a password, with a code from an authenticator app.",
-    backLabel: "Back to overview",
+    backLabel: "Back to settings",
     activeStatus: (count) => `Two-factor authentication is active. ${count} backup code${count === 1 ? "" : "s"} remaining.`,
     disableHeading: "Disable",
     passwordConfirmLabel: "Password to confirm",
@@ -1605,8 +1605,9 @@ export const en: Dictionary = {
     navOrders: { title: "Orders", description: "Order history, shipping status, and invoices" },
     navAddresses: { title: "Addresses", description: "Manage delivery addresses" },
     navWishlist: { title: "Wishlist", description: "View saved products" },
-    navSecurity: {
-      title: "Security",
+    navSettings: {
+      title: "Settings",
+      description: "Security and privacy",
       twoFactorLabel: "Two-factor authentication",
       twoFactorActive: "active",
       twoFactorInactive: "not active",
@@ -1620,6 +1621,18 @@ export const en: Dictionary = {
     logoutAllDevicesHeading: "Log out all devices",
     logoutAllDevicesDescription: "Ends all active sessions, including this device. You'll need to sign in again.",
     logout: "Log out",
+    settings: {
+      title: "Settings",
+      subtitle: "Your account security and your data in one place.",
+      backLabel: "Back to my account",
+      securityHeading: "Security",
+      twoFactorHeading: "Two-factor authentication",
+      twoFactorActiveDescription: "Active. When you sign in, we also ask for a code from your authenticator app.",
+      twoFactorInactiveDescription: "Not active. We recommend protecting your account with an additional code from an authenticator app.",
+      twoFactorManage: "Manage",
+      twoFactorSetup: "Set up",
+      logoutAllDevicesButton: "Sign out everywhere",
+    },
     privacy: {
       heading: "Privacy",
       downloadDataHeading: "Download my data",