admin user promote|demote <name> over SSH, admin-gated. Promotion needs an active account. Demoting the last admin is refused inside the transaction that counts them.
gitbayd admin user promote|demote host-locally; promote is the recovery path when no admin key is reachable.
Wiki: Admin page updated, pushed with the merge.
Closes #70