Add typed account and password settings

- Add admin account list, create, role, delete, and password workflows
- Execute identity-checked mutations through the existing dispatcher
- Bound queued credential lifetime and wipe transient secrets
- Add explicit password generation with saved-value acknowledgement
- Handle self-revocation and uncertain outcomes without automatic
  retries
- Register optional account routes without disrupting terminal
  transports
- Expand host regressions and document contracts and pending target
  checks

Validated host suites and pio run; hardware validation remains pending.

tests/admin_console_boundary/accounts.py

@@ -24,6 +24,7 @@ db = (ROOT / "src/user_database.c").read_text()
 console = (ROOT / "src/user_console.c").read_text()
 admin = (ROOT / "src/admin_ssh_console.c").read_text()
 prelude = r'''
+#define _POSIX_C_SOURCE 200809L
 #include <assert.h>
 #include <stdbool.h>
 #include <stdint.h>
@@ -33,7 +34,10 @@ prelude = r'''
 typedef int esp_err_t;
 enum { ESP_OK, ESP_FAIL, ESP_ERR_INVALID_ARG, ESP_ERR_INVALID_STATE,
        ESP_ERR_NO_MEM, ESP_ERR_NOT_FOUND, ESP_ERR_NOT_ALLOWED,
-       ESP_ERR_INVALID_RESPONSE, ESP_ERR_INVALID_VERSION };
+       ESP_ERR_INVALID_RESPONSE, ESP_ERR_INVALID_VERSION, ESP_ERR_TIMEOUT };
+       #define pdTRUE 1
+       static bool snapshot_busy;
+       static int last_wait;
 typedef void *SemaphoreHandle_t;
 #define portMAX_DELAY 0
 #define NVS_READWRITE 1
@@ -45,7 +49,7 @@ static bool owner_current = true, remote = true, web = true, mismatch, cancel_pr
 static int notify_error = ESP_OK;
 static char revoked_name[17];
 static void secure_wipe(void *p, size_t n) { memset(p, 0, n); }
-static void xSemaphoreTake(void *m, int t) { (void)m; (void)t; assert(!locks++); }
+static int xSemaphoreTake(void *m, int t) { (void)m; last_wait=t; if (snapshot_busy) return 0; assert(!locks++); return pdTRUE; }
 static void xSemaphoreGive(void *m) { (void)m; assert(locks-- == 1); }
 static const char *esp_err_to_name(int e) { (void)e; return "injected error"; }
 static int nvs_open(const char *ns, int mode, int *h) {
@@ -143,8 +147,11 @@ db_names = ["constant_time_equal", "all_zero", "user_database_username_valid",
             "find_free_user", "stored_keys_equal", "validate_database", "recount",
             "next_generation", "discard_candidate", "commit_candidate_locked", "initialize_user",
             "user_database_principal_is_current", "create_locked", "user_database_create",
-            "mutate_user_begin", "user_database_delete", "user_database_set_role",
-            "user_database_set_password"]
+            "mutate_user_begin", "target_matches_locked", "delete_user", "set_role",
+                        "user_database_delete", "user_database_set_role", "user_database_get_accounts",
+                        "user_database_delete_current", "user_database_set_role_current",
+            "set_password", "user_database_set_password", "user_database_set_password_current",
+                        "user_database_generate_password_value"]
 console_names = ["print_usage", "revoke_user_network_sessions", "read_password",
                  "show_generated_password", "mutation_currentness", "add_user", "change_password",
                  "parse_key_index", "command_user_inner", "command_user"]