Screen model output on the status-card surface and thread locale into the outbound guard

The outbound safety screen ran on the Coach only. A dose-change imperative or
a fabricated clinical risk score written onto a per-metric, biomarker or
derived-score status card persisted as that day's cached assessment, while the
identical sentence in the Coach was caught and replaced -- the only transform
between provider and persistence was whitespace normalisation.

Move the pattern banks into a shared screen that takes the reader's locale.
The old signature took no locale, so the dose-refusal and risk-score contracts
had no enforcement for fr/es/it/pl even though the ground rules ship in all six
contract files. Banks now cover all six locales and each screen runs the
reader's bank plus English, since a provider often answers in English
regardless of the language directive.

Status cards withhold on a trip: serve the deterministic stub and persist no
model text. Nobody waits on a background-generated card, and persisting a
refusal would pin it to the card for the day.

src/lib/documents/fenced-chat.ts

@@ -431,7 +431,7 @@ Reply now as the assistant, grounded ONLY in the documents above, in ${
     if (!replyText) return { ok: false, code: "documents.chat.provider.empty" };
 
     // ── Outbound safety screen (dose-prescription / fabricated risk) ──
-    const outbound = screenCoachReply(replyText);
+    const outbound = screenCoachReply(replyText, locale);
     if (outbound.block && outbound.reason) {
       replyText = coachOutboundFallback(outbound.reason, locale);
       annotate({