feat(admin-rbac): implement user management, audit remediation, distributed locking, and expanded rbac test suite