feat(web): self-service cheie/creds + admin web + email signup (PRD 3.3b)

US-007: rute web proprii /cont/roteste-cheie + /cont/rar-creds scoped pe
sesiune (C13), sectiune "Contul meu" cu cheie afisata o data.
US-010: rol admin (users.is_admin) + require_admin->403 + CLI set-admin +
bootstrap primul cont=admin (count_admins in BEGIN IMMEDIATE, anti-race).
US-011: panou /admin (activare/dezactivare conturi, CSRF + PRG), link admin
+ logout pe dashboard.
US-012: app/email.py notify_signup best-effort degradat fara SMTP + config smtp_*.
Fix: migrare defensiva users.is_admin/email_verified in _migrate.

VERIFY x2 context curat (PASS) + /code-review high. 393 teste pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tools/account.py

@@ -25,6 +25,7 @@ import sys
 from app.accounts import create_account, list_accounts, set_active
 from app.auth import create_api_key
 from app.db import get_connection, init_db
+from app.users import set_admin
 
 
 def _create(conn: sqlite3.Connection, args: argparse.Namespace) -> int:
@@ -67,6 +68,17 @@ def _set_active(conn: sqlite3.Connection, account_id: int, active: bool) -> int:
     return 0
 
 
+def _set_admin(conn: sqlite3.Connection, account_id: int, is_admin: bool) -> int:
+    try:
+        set_admin(conn, account_id, is_admin=is_admin)
+    except ValueError as exc:
+        print(f"eroare: {exc}", file=sys.stderr)
+        return 2
+    actiune = "admin" if is_admin else "non-admin"
+    print(f"Cont {account_id}: marcat ca {actiune}")
+    return 0
+
+
 def _list(conn: sqlite3.Connection, pending_only: bool) -> int:
     rows = list_accounts(conn)
     if pending_only:
@@ -102,6 +114,10 @@ def main(argv: list[str] | None = None) -> int:
     p_deact = sub.add_parser("deactivate", help="dezactiveaza un cont")
     p_deact.add_argument("--account", type=int, required=True, help="account_id")
 
+    p_sadmin = sub.add_parser("set-admin", help="seteaza/sterge rol admin pe un cont")
+    p_sadmin.add_argument("--account", type=int, required=True, help="account_id")
+    p_sadmin.add_argument("--remove", action="store_true", help="sterge rolul admin (implicit: adauga)")
+
     args = parser.parse_args(argv)
 
     init_db()  # asigura schema (accounts.active + index CUI) + cont default
@@ -115,6 +131,8 @@ def main(argv: list[str] | None = None) -> int:
             return _set_active(conn, args.account, True)
         if args.cmd == "deactivate":
             return _set_active(conn, args.account, False)
+        if args.cmd == "set-admin":
+            return _set_admin(conn, args.account, is_admin=not args.remove)
     finally:
         conn.close()
     return 0