规范：统一自有源码中文注释和中文提交约定

tests/review-auth-hardening.e2e.test.mjs

@@ -1,9 +1,9 @@
 /**
- * Failure modes recorded before the fixes:
- * - Certification HTML must keep its QR-refresh script, without reading or writing the console parent.
- * - Receiving a QR URL is not evidence that an image loaded; pending/broken images must not start login polling.
- * - A broken image needs an accessible error and a retry, and a fresh loaded image must still permit normal login.
- * All scenarios enter the actual built pages and replace only the external HTTP service or browser clock.
+ * 修复前记录的失败场景：
+ * - 实名认证 HTML 应保留二维码刷新脚本，但不能读写控制台父页面。
+ * - 收到二维码地址不等于图片已加载；图片等待或损坏时不得开始登录轮询。
+ * - 图片损坏时应提供可访问的错误提示和重试入口；新图片加载成功后仍应允许正常登录。
+ * 所有场景均进入实际构建的页面，仅替换外部 HTTP 服务或浏览器时钟。
  */
 import assert from "node:assert/strict";
 import { test } from "node:test";