refactor(settings): split security into 4 focused tiles

Extracts user-lifecycle, audit and telemetry from the security subpage
into their own tiles, and renames the slimmed-down security subpage to
account-access for a clearer scope. Each subpage now has at most three
detail cards instead of the eight previously crowded into security.

Hub gains four tiles, sub-action redirects (expire-remember-tokens,
run-user-lifecycle) move to their new sections, architecture tests track
the new section list and i18n adds the new labels in de + en.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

tests/Architecture/DetailActionPolicyContractFiles.php

@@ -18,9 +18,11 @@ final class DetailActionPolicyContractFiles
             'pages/admin/roles/edit(default).phtml',
             'pages/admin/permissions/edit(default).phtml',
             // Settings subpages that carry danger actions (and therefore need
-            // the data-detail-confirm-message contract) — general/email/sso/branding
-            // have no destructive buttons and are deliberately excluded.
-            'pages/admin/settings/security(default).phtml',
+            // the data-detail-confirm-message contract). Subpages without
+            // destructive buttons (general/audit/telemetry/email/sso/branding)
+            // are deliberately excluded.
+            'pages/admin/settings/account-access(default).phtml',
+            'pages/admin/settings/user-lifecycle(default).phtml',
             'pages/admin/settings/api(default).phtml',
             'templates/partials/app-details-titlebar.phtml',
             'templates/partials/app-details-aside-actions.phtml',