Add safe Trinity service entry to t27.ai

[gHashTag]

Summary

• add a bilingual Trinity S3AI service entry immediately after the homepage hero
• link Telegram to the confirmed SAFE BETA bot entry
• keep browser access natively disabled until a stable Mini App endpoint passes identity smoke
• add a focused contract check for URL, identity copy, disabled semantics, and placement

Verification

• npm run check:service-entry (10/10)
• npm run typecheck:ratchet (179 errors / 26 files, baseline unchanged; no file gained errors)
• scoped ESLint PASS
• npm run check:aria PASS
• npm run check:api PASS
• npm run build PASS
• EN and RU route audits PASS (27 routes each)
• visual EN/RU PASS: exact Telegram href, browser disabled, console errors 0
• independent scoped verification PASS

Raw npm run typecheck remains red on the existing repository baseline; this change adds no TypeScript errors.

No DNS, BotFather, Railway, secrets, or production configuration changes.