Adds an owner-only experimental API and hidden CLI command for
break-glass user email corrections.
The operation verifies the existing email, updates it transactionally,
clears outstanding password-reset state, revokes the target user's Coder
sessions and API tokens, and records successful and failed authenticated
attempts in the audit log. External-auth links remain unchanged.
Generated by Coder Agents.