TL;DR:

- Replaced all of Lingui's `t()` syntax with `msg()` syntax.
- Mechanically (i.e with a script) converted all of the PO files to XLIFF files
- Refactored the localization code to be a bit smarter:
  - the function `getBestMatchLocale` takes the locale lists and a requested locale, and returns the
    first match of:
    - The locale's code exactly matches the requested locale
    - The locale code exactly matches the prefix of the requested locale (i.e the "en" part of "en-US")
    - the locale code's prefix exactly matches the prefix of the requested locale
    This function is passed to lit-locate's `loadLocale()`.
  - `activateLocale()` just calls `loadLocale()` now.
  - `autodetectLanguage` searches the following, and picks the first that returns a valid locale
    object, before passing it to `loadLocale()`:
    - The User's settings
    - A `?locale=` component found in `window.location.search`
    - The `window.navigator.language` field
    - English

The `msg()` only runs when it's run.  This seems obvious, but it means that you cannot cache
strings at load time; they must be kept inside functions that are re-run so that the `msg()` engine
can look up the strings in the preferred language of the user at that moment.

You can use thunks-of-strings if you really need them that way.

deleted.

\#\# Details

-   Resolves #5171

\#\# Changes

\#\#\# New Features

-   Adds a "Add an Application" to the LibraryView if there are no applications and the user is an administrator.

\#\#\# Breaking Changes

-   Adds breaking change which causes \<issue\>.

\#\# Checklist

-   [ ] Local tests pass (`ak test authentik/`)
-   [ ] The code has been formatted (`make lint-fix`)

If an API change has been made

-   [ ] The API schema has been updated (`make gen-build`)

If changes to the frontend have been made

-   [ ] The code has been formatted (`make web`)
-   [ ] The translation files have been updated (`make i18n-extract`)

If applicable

-   [ ] The documentation has been updated
-   [ ] The documentation has been formatted (`make website`)

* main: (58 commits)
  web: bump @babel/preset-env from 7.22.2 to 7.22.4 in /web (#5808)
  web: bump @typescript-eslint/eslint-plugin from 5.59.7 to 5.59.8 in /web (#5805)
  web: bump @babel/plugin-transform-runtime from 7.22.2 to 7.22.4 in /web (#5806)
  web: bump @typescript-eslint/parser from 5.59.7 to 5.59.8 in /web (#5807)
  stages/deny: fix typos (#5800)
  core: bump coverage from 7.2.6 to 7.2.7 (#5809)
  blueprints: allow setting user's passwords from blueprints (#5797)
  providers/proxy: add support for traefik.io API and CRD (#5801)
  web: fix build (#5798)
  web/flows: fix RedirectStage not detecting absolute URLs correctly (#5781)
  lifecycle: Add depends_on for worker and server container (#5634)
  web: bump @babel/preset-env from 7.21.5 to 7.22.2 in /web (#5791)
  web: bump @babel/plugin-proposal-decorators from 7.21.0 to 7.22.3 in /web (#5787)
  web: bump @lingui/core from 4.1.2 to 4.2.0 in /web (#5782)
  website: bump postcss from 8.4.23 to 8.4.24 in /website (#5783)
  web: bump @babel/plugin-transform-runtime from 7.21.4 to 7.22.2 in /web (#5789)
  core: bump goauthentik.io/api/v3 from 3.2023051.3 to 3.2023052.1 (#5788)
  web: bump @babel/core from 7.21.8 to 7.22.1 in /web (#5790)
  web: bump yaml from 2.3.0 to 2.3.1 in /web (#5792)
  core: bump django-otp from 1.2.0 to 1.2.1 (#5794)
  ...

* main:
  ci: build outpost binaries statically linked (#5823)
  blueprints: fix API validation with OCI blueprint path (#5822)
  ci: replace github bot account with github app (#5819)
  providers/ldap: fix LDAP Outpost application selection (#5812)
  website: handle go-get requests statically (#5821)
  web: bump @rollup/plugin-node-resolve from 15.0.2 to 15.1.0 in /web (#5816)
  core: bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#5818)
  web: bump pyright from 1.1.310 to 1.1.311 in /web (#5817)
  website: switch to selfhosted plausible

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

The CI produced a list of problems that I hadn't caught earlier,
due to a typo ("localize build" is correct, "localize compile" is
not) I had left in package.json.  They were minor and linty, but
it was still wise to fix them.

…nto lit-localization

* refs/remotes/origin/lit-localization:
  use build not compile
  fix package lock?
  update transifex config

This commit fixes some minor linting issues that were hidden by a typo in package.json.  The
issues were not apparently problematic from a Javascript point of view, but they pointed
to sloppy thinking in the progression of types through the system, so I cleaned them
up and formalized the types from LocaleModule to AkLocale.

One problem that has repeatedly come up is that localize's templates do not produce
JavaScript that conforms with our shop style.  I've replaced `build-locale` with
a two-step that builds the locale *and* ensures that it conforms to the shop style
via `prettier` every time.

This commit applies the most recent bundle of translations to the
new lit-locale aspect component.  It also revises the algorithm
for *finding* the correct locale, replacing the complex fall-back
with some rather straightforward regular expressions.

In the case of Chinese, the fallback comes at the end of the
selection list, which may not be, er, politically valuable
(since Taiwan and Hong Kong come before, being exceptions that
need to be tested).  If we need a different order for presentation,
that'll be a future feature.

* main:
  web: bump API Client version (#5826)
  release: 2023.5.3
  website/docs: prepare 2023.5.3 (#5824)
  ci: build outpost binaries statically linked (#5823)
  blueprints: fix API validation with OCI blueprint path (#5822)
  ci: replace github bot account with github app (#5819)
  providers/ldap: fix LDAP Outpost application selection (#5812)
  stages/deny: fix typos (#5800)
  web/flows: fix RedirectStage not detecting absolute URLs correctly (#5781)

Well, that was embarassing.