Delete Admin User

Two guards (HTTP 400)

• Self-delete — refuses if the caller is deleting themselves.
• Last admin — refuses if this is the only admin remaining.

Permission: settings.users.delete.