fix(design): claim audit part 1b — whole-row switches, the field-family edge, state-layer hovers, icon links, reason-disabled controls, 24/44 targets (E28)

- F12 (owner: A): SwitchRow, the whole settings row toggles; a Config boolean toggles from its title
  and hint (a label pointed at the switch).
- F14 (owner: B): the form dropdown trigger wears the field frame (see-through, the >= 3:1 edge);
  labelled pills keep the faint edge and the accent-edge hover. DESIGN says so, with log rows.
- F6: ~15 bg-card / bg-border / opacity hovers onto the B3 state layer; a lint rule (HOVER_SWAP)
  refuses the swap, contract-tested.
- F10: bare 14px icon links onto IconLink / LinkButton; a local lint rule refuses a glyph-only <a>.
- F13: reason-disabled controls are aria-disabled (Users, Channels backfill, Discovery, Scheduler
  runs, Config tests); FocusSafeButton now swallows the click of a caller's aria-disabled; the
  Config tests say why while dirty (testDirty, HU/EN).
- F5/F11: every control measured live at 24 (mouse) and 44 (coarse) across every page; touch-target
  is a utility that wins over a caller's min-h-6; link variants carry it too; SegmentedToggle,
  Tabs, NavRail, menu rows, PriorityStepper, sliders, CheckRow, InnerInput, card links and the rest.
- F9: DismissibleChip's label reaches the chip's 24; the Combobox chips are DismissibleChips.
- F15: the "+N" / "More..." open state worded as it renders.

frontend/src/components/AdminUsers.tsx

@@ -254,6 +254,7 @@ function UsersRoles({ me }: { me: Me }) {
                   <Badge tone="warning">{t("users.roles.unverified")}</Badge>
                 )}
                 <Tooltip
+                  always={u.is_demo || self}
                   hint={
                     u.is_demo
                       ? t("users.roles.demoLocked")
@@ -269,13 +270,17 @@ function UsersRoles({ me }: { me: Me }) {
                     size="xs"
                     className="shrink-0"
                     onClick={() => onToggle(u)}
-                    disabled={u.is_demo || self || pendingIds.has(u.id)}
+                    // Locked (demo / self) is unavailable WITH a reason, the tooltip's: aria-disabled keeps it
+                    // focusable so a keyboard user reaches the reason. A pending write is transient.
+                    aria-disabled={u.is_demo || self}
+                    disabled={pendingIds.has(u.id)}
                     icon={<Shield className="w-3.5 h-3.5" />}
                   >
                     {u.role === "admin" ? t("users.roles.makeUser") : t("users.roles.makeAdmin")}
                   </Button>
                 </Tooltip>
                 <Tooltip
+                  always={u.is_demo || self}
                   hint={
                     u.is_demo
                       ? t("users.suspend.demoLocked")
@@ -294,7 +299,8 @@ function UsersRoles({ me }: { me: Me }) {
                     size="sm"
                     variant={u.is_suspended ? "outline-warn" : "outline"}
                     onClick={() => onSuspend(u)}
-                    disabled={u.is_demo || self || pendingIds.has(u.id)}
+                    aria-disabled={u.is_demo || self}
+                    disabled={pendingIds.has(u.id)}
                   >
                     {u.is_suspended ? (
                       <RotateCcw className="w-4 h-4" />
@@ -304,6 +310,7 @@ function UsersRoles({ me }: { me: Me }) {
                   </IconButton>
                 </Tooltip>
                 <Tooltip
+                  always={u.is_demo || self}
                   hint={u.is_demo || self ? t("users.delete.locked") : t("users.delete.action")}
                 >
                   <IconButton
@@ -312,7 +319,8 @@ function UsersRoles({ me }: { me: Me }) {
                     size="sm"
                     variant="outline-danger"
                     onClick={() => onDelete(u)}
-                    disabled={u.is_demo || self || pendingIds.has(u.id)}
+                    aria-disabled={u.is_demo || self}
+                    disabled={pendingIds.has(u.id)}
                   >
                     <Trash2 className="w-4 h-4" />
                   </IconButton>