Add typed account and password settings

- Add admin account list, create, role, delete, and password workflows
- Execute identity-checked mutations through the existing dispatcher
- Bound queued credential lifetime and wipe transient secrets
- Add explicit password generation with saved-value acknowledgement
- Handle self-revocation and uncertain outcomes without automatic
  retries
- Register optional account routes without disrupting terminal
  transports
- Expand host regressions and document contracts and pending target
  checks

Validated host suites and pio run; hardware validation remains pending.

tests/admin_console_boundary/test.c

@@ -340,5 +340,16 @@ int main(void)
     pump(worker_task);
     assert(runs == before_serial + 5 && serial_settings_executed == 17 && !s_request_queue->count);
     puts("PASS: typed Serial admission uses zero wait on success/full queue, preserves all four queued UART requests and FIFO execution, no command-string dispatch");
+    assert(admin_ssh_console_submit_account_settings(0) == ESP_ERR_INVALID_STATE);
+    s_dispatch_ready = false;
+    assert(admin_ssh_console_submit_account_settings(1) == ESP_ERR_INVALID_STATE);
+    s_dispatch_ready = true; queue_full = true;
+    assert(admin_ssh_console_submit_account_settings(1) == ESP_ERR_TIMEOUT && queue_send_wait == 0);
+    queue_full = false;
+    assert(admin_ssh_console_submit_serial_settings(21) == ESP_OK);
+    assert(admin_ssh_console_submit_account_settings(22) == ESP_OK && queue_send_wait == 0);
+    pump(worker_task);
+    assert(serial_settings_executed == 21 && account_settings_executed == 22 && runs == before_serial + 5);
+    puts("PASS: typed Accounts uses same bounded queue with nonblocking admission and isolated dispatcher routing");
     puts("PASS: admission/identity, two owners, completion contention/reopen, history, queued stale/revoked work, UART dispatch, hidden/disconnected prompts, exit-to-SELF_CLOSE, deferred rejection/drain/close, 5s output backpressure");
 }