An admin's refusals (self-suspend, scorecard, front page) live in one module, and the API and MCP read them from there #5561

For: What a non-admin, or an admin acting on themselves, is told reads the same from every door, because every door reads it from one place. Today each sentence below is typed out separately in src/http/api.ts and src/http/mcp.ts (account_suspend, scorecard, front_page), so the next edit to one door makes them drift. This is the fix pull #5504's reviewer asked for, applied to these words.

Done:

• [ ] A new src/actions/admin_words.ts exports these sentences (a const object or small functions, plain data):

- "an admin cannot suspend or remove themselves, another admin, or an agent" - "the crew's scorecard is a forge admin's to read" - "the front page is a site admin's to set"

• [ ] Each door (src/http/api.ts and src/http/mcp.ts (account_suspend, scorecard, front_page)) imports them, and none of these sentences is typed out anywhere else under src/ (grep -rn for each finds only the module).
• [ ] Answers are byte-for-byte unchanged: every existing test passes as it is.
• [ ] A new test/admin-words.test.ts triggers one of the refusals through each door and asserts each answers the module's sentence. It fails if a door retypes the words.
• [ ] Before pushing, run test/admin-words.test.ts, the tests of each door you touched and bun x tsc --noEmit. A red test elsewhere that main also has is named in the pull, not a reason to stop.

Files: src/actions/admin_words.ts (new), the doors named, test/admin-words.test.ts. Risk: a pure move; change no wording. Other MCP work edits src/http/mcp.ts in parallel, so keep each edit to the literal's own line.