Update displayName or role-within-org for a customer user
patch
/v1/admin/users/{id}Role updates require both `role` and `orgId`. The previous `isSystemAdmin` toggle has been removed — staff identity is now governed by `admin_users` membership, not a flag on the customer row.