GHSA-29xf-69gq-m9jx: Coder: User-admin role can reset owner account password

A vulnerability in Coder allowed users with the `user-admin` role (a privileged account management permission) to reset the password of `owner` accounts (the highest-level administrators) without knowing the current password, potentially letting them take control of the entire deployment. This was a privilege escalation, where an attacker with lower-level admin access could gain full administrative control.