perf(net): one balance scan per poll, filtered opstatus, a guarded merge scope

The Core poll ran z_gettotalbalance twice (minconf 0 and 1), each a whole-
wallet scan under dragonxd's cs_main. The spendable (minconf=1) call now
runs only after the display call succeeded, and only when something is
unconfirmed or pending or the exact total moved: about 95% of polls make
one scan instead of two. A forced post-send balance can no longer be lost
to a refused enqueue, and pending-send debits aren't re-applied each tick.

z_getoperationstatus is filtered to our opids with its real argument form
([[id,...]]; the old ["id"] was rejected), falling back to the unfiltered
call if a daemon refuses the filter. The Shield/Merge dialog's own polls
are filtered and session-guarded too, and finally reach Done; the dead
RPCClient wrappers are deleted.

The Merge/Consolidate scope scan becomes a tested state machine: one scan
at a time, failures latch behind a Retry button, only "node not ready"
retries by itself (10/30/60 s, at most 3), Lite never scans. Its 120 s
calls are maintenance calls: every main-thread disconnect aborts one in
flight first, so a lifecycle action no longer freezes the UI behind it.
An aborted merge that was already sent says it may still go through.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

res/lang/pt.json

@@ -1178,10 +1178,12 @@
     "merge_keep_each_status_failed": "%s — falhou: %s",
     "merge_keep_each_status_not_started": "%s — não iniciado: %s",
     "merge_keep_each_status_running": "%s — mesclando %d notas (%d de %d lotes concluídos)…",
+    "merge_keep_each_status_unconfirmed": "%s — não foi possível confirmar o status",
     "merge_keep_each_too_small": "Pequeno demais para consolidar: a taxa consumiria esses fundos.",
     "merge_max_inputs": "Máx. de entradas por lote",
     "merge_no_spendable": "Ainda não há entradas disponíveis para consolidar.",
     "merge_progress": "Consolidando… isso pode levar alguns minutos. Você pode fechar esta janela.",
+    "merge_scope_failed_fmt": "Não foi possível ler suas entradas: %s",
     "merge_scope_fmt": "%d entradas transparentes + %d blindadas  ·  ~%s DRGX disponíveis",
     "merge_scope_loading": "Verificando suas entradas…",
     "merge_send_failed": "Falha na fusão: ",
@@ -1190,7 +1192,10 @@
     "merge_src_shielded": "Blindado",
     "merge_src_transparent": "Transparente",
     "merge_started": "Operação de fusão iniciada",
+    "merge_submit_uncertain": "O nó não confirmou a fusão antes de a conexão ser interrompida. Ela ainda pode ser concluída — verifique o Histórico após reconectar antes de fundir novamente.",
     "merge_title": "Fundir para Endereço",
+    "merge_wait_locked": "A carteira está bloqueada. Desbloqueie-a para continuar.",
+    "merge_waiting_node": "Aguardando o nó…",
     "merge_where": "Para onde devem ir os fundos?",
     "mig_adopt": "Tornar esta minha carteira",
     "mig_adopt_now": "Adotar carteira semente",