fix(FOUR-33567): block users after failed login attempts and prevent …

[gproly]

…502 on lockout

• only cache a positive result in Setting::readyToUseSettingsDatabase() so settings are not permanently unavailable in Octane when evaluated before tenant resolution
• replace gettext _() with Laravel __() in login, 2FA, password expiry, and script executor flows to avoid php-fpm SIGSEGV on macOS (502 Bad Gateway)
• add regression test for account lockout after too many failed login attempts

https://processmaker.atlassian.net/browse/FOUR-33567

ci:deploy

[cursor]

PR Summary

Low Risk
String translation helper swaps and a feature test; no change to lockout logic beyond how messages are resolved.

Overview
Replaces gettext _() with Laravel __() for user-facing strings in login lockout, 2FA validation, password-expiry redirect, script-executor delete errors, and 2FA email subject. This avoids php-fpm SIGSEGV / 502 on macOS when those paths run during failed login or related auth flows.

Adds testUserIsBlockedAfterTooManyFailedLoginAttempts, which sets password-policies.login_attempts to 3, triggers repeated bad logins, and asserts the locked-account validation message and BLOCKED user status.

Minor non-behavior changes: PHPDoc type hints (e.g. Closure, User, MailMessage), a trailing comma in a 2FA config response array, and whitespace in check2faByGroups.

^{Reviewed by Cursor Bugbot for commit 05ac884. Bugbot is set up for automated code reviews on this repo. Configure here.}

[decisions-sonarqube]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarQube

[vladyrichter]

QA server K8S was successfully deployed https://tenant-1.ci-900db43097.engk8s.processmaker.net