Show localized permission errors for denied create routes

[chen21019]

Change

• Display a sticky localized permission error before the existing safe redirect for denied Stack and Service creation routes.
• Preserve separate update semantics for Service upgrade and add focused guard tests.
• Bump Web Console to 1.6.154 and update release documentation.

Verified

• Chrome 153 focused QUnit: 5 cases, 20 assertions passed.
• Localization quality: 12 locales, 0 missing/orphan/invalid ICU messages.
• Packaged Server and 8080 browser acceptance remain pending; this PR does not claim those results.