fix(auth): audit administrator and upgrade authorization matrix (#1381)

[s6pa1rta3n-lab]

Summary

Comprehensive audit and authorization matrix test suite addressing Issue #1381:

• Verified and enforced entrypoint authorization matrix for primary persistent admin enforcement on contract upgrades and rollbacks
• Verified rejection of legacy instance storage admin bypass attempts
• Verified rejection of delegated SuperAdmin and unprivileged roles from contract upgrade entrypoints
• Multi-admin permission validation and instant permission revocation upon role demotion or admin removal
• Fixed count_admins_with_role to accurately track active role assignments across AdminList without double counting
• Prevention of removing or demoting the last remaining SuperAdmin
• Added complete negative test coverage matrix across all privileged variants

Acceptance Stipulations Checklist

• Matrix of entrypoint permissions across roles (SuperAdmin, MarketAdmin, FeeAdmin, ConfigAdmin, ReadOnlyAdmin)
• Role transition / demotion instant permission drop verification
• Admin removal immediately revokes access
• Event emission auditability for actor and action lifecycle
• Contract upgrade / rollback restricted strictly to primary persistent admin
• No mocking / faked assertions

Payout Routing

• EVM (Base/Arbitrum/Polygon/ETH): 0xF46C9F6d70C50BF81ef3588AB523a90a594a2F89
• Stellar: GCL6OXAMLD75BMTINA6EMRUDWK5THQUSHMYNLSNBCJAPZJHNYJTUNIBC