feat(access): add guarded local password lifecycle and recovery

src/govoplan_access/backend/api/v1/admin_schemas.py

@@ -660,6 +660,7 @@ class SystemAccountItem(BaseModel):
     email: str
     display_name: str | None = None
     is_active: bool
+    local_password: bool = False
     memberships: list[dict[str, Any]] = Field(default_factory=list)
     roles: list[RoleSummary] = Field(default_factory=list)
     last_login_at: datetime | None = None