fix(formatters): localize PR buttons, cap oversized content, dedupe status logic

- PR merge/close button labels now follow the group language (actions.merge/close)
  instead of hardcoded Chinese
- clamp content to Discord embed limits (title 256, description 4096, field value
  1024, 25 fields) in formatters plus a render-layer safety net; Telegram gets a
  tag-safe 4096-char cap (capHtml closes dangling tags)
- raise commit subject truncation from 72 to 200 chars (MAX_COMMIT_SUBJECT)
- extract workflowStatus/workflowRunStatus/statusColorKey helpers shared by
  check_run/check_suite/workflow_run/workflow_job
- dedupe deployment ref/sha fields via addDeploymentRefFields
- commit_comment without a commit id uses title_plain (no dangling ???????)
- tag pushes now report 'Tag created'; zh push title includes the {ref}
- sender profile link derives from the repo's forge origin instead of github.com
- group webhook log emoji injected via emojiPrefix, removed from locale files
- dispatchEvent accepts preloaded groups (single KV read per webhook)
- webhook 401 logs distinguish 'secret not configured' from 'invalid signature'

server/lib/formatters/custom.ts

@@ -1,5 +1,13 @@
 import type { NeutralAuthor, NeutralField, NeutralMessage } from "../types";
-import { type T, buildMessage } from "./helpers";
+import {
+  cap,
+  MAX_DESCRIPTION,
+  MAX_FIELDS,
+  MAX_FIELD_VALUE,
+  MAX_TITLE,
+  type T,
+  buildMessage,
+} from "./helpers";
 
 const COLOR_WORDS: Record<string, number> = {
   red: 0xf85149,
@@ -29,12 +37,12 @@ function parseFields(raw: unknown): NeutralField[] | undefined {
     const value = (f as Record<string, unknown>).value;
     if (typeof name !== "string" || typeof value !== "string") continue;
     fields.push({
-      name: name || "\u200b",
-      value,
+      name: cap(name || "\u200b", MAX_TITLE),
+      value: cap(value, MAX_FIELD_VALUE),
       inline: (f as Record<string, unknown>).inline === true,
     });
   }
-  return fields.length > 0 ? fields : undefined;
+  return fields.length > 0 ? fields.slice(0, MAX_FIELDS) : undefined;
 }
 
 /**
@@ -50,15 +58,18 @@ export function formatCustom(
   t: T,
   _showEmoji: boolean,
 ): NeutralMessage {
-  const title =
+  const title = cap(
     typeof payload.title === "string" && payload.title.trim()
       ? payload.title.trim()
-      : t("custom.title_fallback");
+      : t("custom.title_fallback"),
+    MAX_TITLE,
+  );
   const payloadRepo =
     typeof payload.repo === "string" && payload.repo.trim() ? payload.repo.trim() : undefined;
   const effectiveRepo = payloadRepo ?? repo;
   const fullTitle = effectiveRepo ? `${effectiveRepo}: ${title}` : title;
-  const description = typeof payload.description === "string" ? payload.description : undefined;
+  const description =
+    typeof payload.description === "string" ? cap(payload.description, MAX_DESCRIPTION) : undefined;
   const url = typeof payload.url === "string" ? payload.url : undefined;
   const footer = typeof payload.footer === "string" ? payload.footer : undefined;