refactor(admin): drop unused bulk-create nonce field

The form was a structural shell only — its submit is hijacked by the
picker JS and dispatched via wp.apiFetch, which carries its own
X-WP-Nonce. There's no server-side handler for the POST, so the nonce
field was emitted but never verified. Removed and replaced with a
comment explaining the auth path.

Author: apermo

includes/MslsTranslationPickerPage.php

@@ -446,8 +446,10 @@ private static function render_list_table( int $source, string $post_type, strin
 		$table = new MslsTranslationPickerTable( $source, $post_type, $search );
 		$table->prepare_items();
 
+		// The form's submit is intercepted client-side and dispatched through
+		// the REST API (which carries its own X-WP-Nonce), so no server-side
+		// nonce is required here.
 		echo '<form method="post" id="msls-tp-form">';
-		wp_nonce_field( 'msls_tp_bulk', 'msls_tp_nonce' );
 		$table->display();
 		echo '</form>';
 	}