Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@pkg/cli/app.go`:
- Around line 72-74: The documentation comment "Exits with code 1 on error or
panic." is incorrectly placed above the LocaleSource type alias; move that
sentence into the doc block for MainWithLocales (or the Main function doc if
applicable) so it documents MainWithLocales's behavior instead of
LocaleSource—update the comment adjacent to the MainWithLocales declaration
(referencing MainWithLocales and LocaleSource) and remove it from above the
LocaleSource type alias.

In `@pkg/cli/commands.go`:
- Around line 110-115: RegisteredLocales currently returns the backing slice
registeredLocales after releasing registeredCommandsMu, exposing callers to
mutation/race; while holding the lock in RegisteredLocales(), allocate a new
slice and copy the contents of registeredLocales into it, then return that copy
so callers cannot mutate the internal registry or race with subsequent appends
(keep references to registeredCommandsMu, registeredLocales and
RegisteredLocales for locating the change).

In `@pkg/cli/locales/en.json`:
- Around line 22-23: The locale strings "issues" and "issues_error" are being
used by cmd/core/doctor/cmd_doctor.go for required-check failures but currently
contain issue-fetching copy and no Count placeholder; update
pkg/cli/locales/en.json to replace those entries (or add the correct keys that
cmd/core/doctor/cmd_doctor.go references) with copy reflecting
tooling/required-check failures and include the Count placeholder (e.g., "X
required tools missing: {{Count}}" and an error message that accepts Count), or
alternatively change cmd_doctor.go to reference the correct existing keys—ensure
the translation keys used in cmd_doctor.go and the JSON keys match and that the
string contains the Count interpolation.

In `@pkg/cli/utils.go`:
- Around line 24-28: The current logic calls LogWarn in both branches, causing
normal authenticated state to be logged as a warning; update the code that
checks the authenticated boolean (the branch using LogWarn and log.Username())
so that the authenticated path uses a non-warning level (e.g., LogInfo or no
log) and only the unauthenticated path calls LogWarn with the message "GitHub
CLI not authenticated" (referencing the LogWarn function, the authenticated
variable, and log.Username()).

---

Nitpick comments:
In `@cmd/core/go.mod`:
- Line 3: Replace the module's hard minimum Go version declared by the line "go
1.26.0" with "go 1.25" and add a toolchain directive "toolchain go1.26.0" so the
build prefers Go 1.26 without forcing it; update the existing "go 1.26.0"
directive (referenced as the go directive) to "go 1.25" and insert the toolchain
directive immediately after it, unless this module actually requires Go
1.26-only APIs.

In `@pkg/cli/app.go`:
- Around line 102-104: The loop in app.go assumes RegisteredLocales() returns
fs.FS whose translations live at the FS root (Dir: "."), which breaks if
packages embed translations in a subdir; update the registration API and
consumers to carry directory info: change RegisterCommands / RegisteredLocales
to register and return i18n.FSSource (or a struct with FS and Dir) instead of
plain fs.FS, update the loop in app.go to append each returned i18n.FSSource
directly (use its Dir rather than hardcoding "."), and update all callers/tests
accordingly; also add a short doc comment to the RegisterCommands API explaining
the expected directory contract if you prefer the simpler doc-only option.

In `@pkg/cli/commands.go`:
- Around line 54-71: The current applyI18n uses only cmd.Name() and
root.Commands() so it builds flat keys like "cmd.install.short" and skips
subcommands; change it to derive keys from the full command path and walk all
commands recursively. For each cobra.Command use cmd.CommandPath() (replace
spaces with dots) and build key := "cmd."+strings.ReplaceAll(cmd.CommandPath(),
" ", ".") instead of "cmd."+cmd.Name(); also change the traversal to visit every
command (e.g., use root.VisitCommands(...) or a recursive loop over
cmd.Commands()) so subcommands receive i18n keys; keep the same Short/Long
conditional logic but use the new key variable.

In `@pkg/cli/i18n.go`:
- Around line 7-13: Update the doc comment for the function T in pkg/cli/i18n.go
to reflect its current behavior: remove references to a CLI-local service or a
fallback and state that this wrapper always delegates directly to the global
i18n.T, passing through optional args; ensure the comment mentions the signature
(T(key string, args ...map[string]any) string) and that it simply forwards to
i18n.T.