fix(frontend): make the panel usable with screen readers (#6907)

* fix(frontend): make the panel usable with screen readers

* fix(frontend): keep mobile tab names and the inbound expiry hint

Review of #6907 found two gaps in the screen-reader pass:

- On phone-width screens catTabLabel renders only the icon and names the
  tab by putting aria-label on it, but callers now pass that icon with
  aria-hidden for the desktop label, so every Settings, Xray and Host
  category tab lost its name under TalkBack. catTabLabel now clears
  aria-hidden on the icon it uses as the name.
- DateTimePicker forwarded id and aria-label but not aria-describedby,
  so the inbound expiry hint ("leave blank to never expire") was never
  attached. It now forwards it on both the Gregorian and Jalali input.

frontend/.oxlintrc.json

@@ -9,7 +9,9 @@
     "jsx-a11y"
   ],
   "jsPlugins": [
-    "./tools/oxlint/input-number-guard.mjs"
+    "./tools/oxlint/input-number-guard.mjs",
+    "./tools/oxlint/control-label-guard.mjs",
+    "./tools/oxlint/icon-a11y-guard.mjs"
   ],
   "categories": {
     "correctness": "error"
@@ -48,7 +50,9 @@
     "react-hooks/exhaustive-deps": "error",
     "jsx-a11y/no-autofocus": "off",
     "input-number/no-synthetic-clear": "off",
-    "jsx-a11y/prefer-tag-over-role": "off"
+    "jsx-a11y/prefer-tag-over-role": "off",
+    "control-label/has-name": "off",
+    "antd-icon/explicit-a11y": "off"
   },
   "overrides": [
     {
@@ -67,6 +71,25 @@
       "rules": {
         "input-number/no-synthetic-clear": "off"
       }
+    },
+    {
+      "files": [
+        "src/**/*.tsx"
+      ],
+      "rules": {
+        "control-label/has-name": "error",
+        "antd-icon/explicit-a11y": "error"
+      }
+    },
+    {
+      "files": [
+        "src/**/*.stories.tsx",
+        "src/test/**"
+      ],
+      "rules": {
+        "control-label/has-name": "off",
+        "antd-icon/explicit-a11y": "off"
+      }
     }
   ]
 }