Add typed account and password settings

- Add admin account list, create, role, delete, and password workflows
- Execute identity-checked mutations through the existing dispatcher
- Bound queued credential lifetime and wipe transient secrets
- Add explicit password generation with saved-value acknowledgement
- Handle self-revocation and uncertain outcomes without automatic
  retries
- Register optional account routes without disrupting terminal
  transports
- Expand host regressions and document contracts and pending target
  checks

Validated host suites and pio run; hardware validation remains pending.

tests/web_cookie_auth/README.md

@@ -16,6 +16,36 @@ This is **not** the full IDF parser/dispatcher, real handshake/TLS/socket, brows
 
 See `docs/phase8d3_implementation.md` for source verification, other suite commands, build accounting and the target checklist.
 
+## Accounts (8D.10)
+
+```sh
+python3 tests/web_cookie_auth/run.py --accounts
+python3 tests/admin_console_boundary/accounts.py
+```
+
+The first command adds nine account HTTP/operation groups using production
+cookie/store/handler/parser and the canonical generated-value helper. Queue,
+database mutations, timer scheduling and revocation are doubles; authorization
+is real. Covers max-width eight-account projection, strict 768-byte/four-receive
+credential schemas, decoded printable-ASCII passwords, bodyless generated-value
+authorization/currentness/no-mutation/cleanup, timer creation/start failure,
+queued expiry/replacement/executing fences, self success revocation and protected
+failure, pending/result isolation, stale IDs, submission/execution failure,
+target-only notifications, session invalidation and missed revocation/DB failure.
+Parent reports PASS for these nine groups plus shared regressions. Direct-handler
+tests do not prove route registration; the missing registration is now fixed as
+an independent optional endpoint (23 handlers), and the route agent reports 15
+lifecycle groups passing for registration, failure isolation and restart.
+Implementation is host-tested/build-verified (parent `pio run` PASS, 25.61 s,
+95,908 B RAM / 1,694,237 B flash), not target accepted. New timer runtime costs
+remain unmeasured. No sanitizer validation or device/asset/commit/8D.11 action.
+The second command separately exercises production conditional database mutation
+and zero-wait list bodies with NVS/RTOS doubles, including last-admin protection,
+target generation/recreation checks and commit-failure cleanup. It retains the
+canonical CLI account tests. These are not end-to-end RTOS/flash/TLS tests.
+See `docs/phase8d10_implementation.md` for current contracts, historical slice 1
+evidence and pending target checks. Timer doubles do not prove hard cleanup latency.
+
 ## Read-only Serial Settings
 
 ```sh