search and ai stabilization work, localization stablized.

src/__Libraries/StellaOps.Configuration/AuthorityServiceAccountSeedOptions.Validation.cs

@@ -1,6 +1,7 @@
 using System;
 using System.Collections.Generic;
 using System.Text.RegularExpressions;
+using static StellaOps.Localization.T;
 
 namespace StellaOps.Configuration;
 
@@ -18,27 +19,27 @@ public sealed partial class AuthorityServiceAccountSeedOptions
     {
         if (string.IsNullOrWhiteSpace(AccountId))
         {
-            throw new InvalidOperationException("Delegation service account seeds require an accountId.");
+            throw new InvalidOperationException(_t("config.service_account.id_required"));
         }
 
         if (!_accountIdRegex.IsMatch(AccountId))
         {
-            throw new InvalidOperationException($"Service account id '{AccountId}' must contain lowercase letters, digits, colon, underscore, or hyphen.");
+            throw new InvalidOperationException(_t("config.service_account.id_format", AccountId));
         }
 
         if (string.IsNullOrWhiteSpace(Tenant))
         {
-            throw new InvalidOperationException($"Service account '{AccountId}' requires a tenant assignment.");
+            throw new InvalidOperationException(_t("config.service_account.tenant_required", AccountId));
         }
 
         if (tenantIds.Count > 0 && !tenantIds.Contains(Tenant))
         {
-            throw new InvalidOperationException($"Service account '{AccountId}' references unknown tenant '{Tenant}'.");
+            throw new InvalidOperationException(_t("config.service_account.tenant_unknown", AccountId, Tenant));
         }
 
         if (AllowedScopes.Count == 0)
         {
-            throw new InvalidOperationException($"Service account '{AccountId}' must specify at least one allowed scope.");
+            throw new InvalidOperationException(_t("config.service_account.scope_required", AccountId));
         }
 
         if (Attributes.Count > 0)
@@ -47,7 +48,7 @@ public sealed partial class AuthorityServiceAccountSeedOptions
             {
                 if (!_allowedAttributeKeys.Contains(attributeName))
                 {
-                    throw new InvalidOperationException($"Service account '{AccountId}' defines unsupported attribute '{attributeName}'. Allowed attributes: env, owner, business_tier.");
+                    throw new InvalidOperationException(_t("config.service_account.unsupported_attribute", AccountId, attributeName));
                 }
             }
         }