Add typed account and password settings

- Add admin account list, create, role, delete, and password workflows
- Execute identity-checked mutations through the existing dispatcher
- Bound queued credential lifetime and wipe transient secrets
- Add explicit password generation with saved-value acknowledgement
- Handle self-revocation and uncertain outcomes without automatic
  retries
- Register optional account routes without disrupting terminal
  transports
- Expand host regressions and document contracts and pending target
  checks

Validated host suites and pio run; hardware validation remains pending.

tests/web_ui_session/run.py

@@ -78,7 +78,13 @@ esp_err_t httpd_resp_send(httpd_req_t *, const char *, ssize_t);
         assert (rendered['html'].index('id="terminal-title"') <
                 rendered['html'].index('id="admin-toggle"') <
                 rendered['html'].index('id="terminal-selector"'))
-        for forbidden in ('localStorage', 'sessionStorage', 'document.cookie', 'console.log', 'innerHTML', 'Authorization'):
+        for field in ('account-password', 'account-password-confirm'):
+            assert re.search(r'id="' + field + r'" type="password" maxlength="64" autocomplete="new-password"', rendered['html'])
+        assert 'id="account-generated" readonly autocomplete="off"' in rendered['html']
+        assert 'id="account-password-saved" type="checkbox"' in rendered['html']
+        assert 'not applied yet' in rendered['html'] and 'no retrieval' in rendered['html']
+        assert 'JavaScript cannot securely zero strings' in rendered['html']
+        for forbidden in ('localStorage', 'sessionStorage', 'document.cookie', 'console.log', 'innerHTML', 'Authorization', 'clipboard', 'pushState', 'replaceState'):
             assert forbidden not in rendered['script'] + rendered['loader'], forbidden
         (tmp / 'rendered.json').write_text(json.dumps(rendered))
         subprocess.run(['node', str(HERE / 'browser.cjs'), str(tmp / 'rendered.json')], check=True, timeout=30)