Localizza errori API, sistema layout mobile e documenta allineamento iOS.

Gli header Accept-Language dalle app e i fix di padding/menu sul web chiudono il giro password-policy; il doc guida il lavoro su Mac.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/spec/requests/account_spec.rb

@@ -68,7 +68,7 @@ RSpec.describe "Account API", type: :request do
               password: "newpass123",
               password_confirmation: "newpass123"
             },
-            headers: auth_headers
+            headers: auth_headers.merge("Accept-Language" => "en")
       expect(response).to have_http_status(:unprocessable_entity)
       expect(JSON.parse(response.body)["error"]).to match(/3 of/i)
       expect(user.reload.authenticate("Password123")).to be_truthy
@@ -81,14 +81,26 @@ RSpec.describe "Account API", type: :request do
               password: "Password123",
               password_confirmation: "Password123"
             },
-            headers: auth_headers
+            headers: auth_headers.merge("Accept-Language" => "en")
       expect(response).to have_http_status(:unprocessable_entity)
       expect(JSON.parse(response.body)["error"]).to match(/different/i)
       expect(user.reload.authenticate("Password123")).to be_truthy
     end
+
+    it "localizes password errors from Accept-Language" do
+      patch "/api/v1/account/password",
+            params: {
+              current_password: "Password123",
+              password: "Password123",
+              password_confirmation: "Password123"
+            },
+            headers: auth_headers.merge("Accept-Language" => "it")
+      expect(response).to have_http_status(:unprocessable_entity)
+      expect(JSON.parse(response.body)["error"]).to eq("La nuova password deve essere diversa da quella attuale")
+    end
   end
 
-  describe "POST /api/v1/auth/password/forgot" do
+    describe "POST /api/v1/auth/password/forgot" do
     it "always returns ok and sends mail when the user exists" do
       expect {
         post "/api/v1/auth/password/forgot", params: { email: user.email }
@@ -103,5 +115,13 @@ RSpec.describe "Account API", type: :request do
       }.not_to change { ActionMailer::Base.deliveries.size }
       expect(response).to have_http_status(:ok)
     end
+
+    it "localizes the response message from Accept-Language" do
+      post "/api/v1/auth/password/forgot",
+           params: { email: user.email },
+           headers: { "Accept-Language" => "fr" }
+      expect(response).to have_http_status(:ok)
+      expect(JSON.parse(response.body)["message"]).to include("réinitialiser")
+    end
   end
 end