Add multi-language injection patterns

Current patterns are English-only. Prompt injection in production often uses non-English text to bypass regex:
- Chinese/Japanese characters mixed with English instructions
- Transliterated commands ("ignora las instrucciones anteriores")
- Mixed-script attacks

Need a `locale` parameter or broader pattern set for international deployments.