Reject edits to the default admin account
requested to merge KKsurendran06/etir-national-application:fix/ena-463-default-admin-protection into dev-1.0.3
Closes #276
The default admin (identified by DEFAULT_ADMIN_USERNAME) must always keep full admin access and cannot be edited via admin user management
-
AccountService: updateAccount()/toggleActiveStatus() now reject changes to the default admin with a 403 instead of silently reverting them after the fact
-
AccountService: default admin is now also granted UNION_ADMIN in union mode (previously only ADMIN), matching "all admin roles possible"
-
AccountDto/AccountController: expose a defaultAdmin flag so the admin frontend can tell this account apart from a regular one
Edited by KK Surendran