Enable bounded browser account administration for Phase 8D.7

Allow other-account add/password and forced delete/role commands through
shared dispatcher and handler policy. Keep self-target,
generated-secret,
key, bootstrap, and recovery workflows blocked.

Revalidate currentness after password prompts and before database API
admission. Document that admitted mutations may finish after disconnect,
while subsequent stale operations must reject.

Add policy, transaction-failure, cleanup, and targeted-revocation
regressions. Record completed review, passing host tests and firmware
build, with target validation and M2 acceptance still pending.

src/admin_ssh_console.h

@@ -121,6 +121,12 @@ esp_err_t admin_ssh_console_start_uart_frontend(void);
 bool admin_ssh_console_dispatch_is_remote(void);
 bool admin_ssh_console_dispatch_is_web(void);
 const user_principal_t *admin_ssh_console_dispatch_principal(void);
+/* Revalidate account, originating owner/session and token before side effects.
+ * False outside the dispatcher; UART0 dispatch remains physically trusted. */
+bool admin_ssh_console_dispatch_is_current(void);
+/* Shared parsed browser account policy: dispatcher admission + handler defense. */
+bool admin_ssh_console_web_user_command_allowed(
+    size_t argc, char **argv, const user_principal_t *principal);
 esp_err_t admin_ssh_console_dispatch_read_input(
     const char *prompt, uint8_t *output, size_t capacity,
     bool hidden, size_t *output_length);