add admin methods

proto/sso/auth.proto

@@ -13,7 +13,11 @@ service AuthService {
     rpc LogoutOther (LogoutRequest) returns (LogoutResponse);
     rpc GetSessions(GetSessionRequest) returns (GetSessionsResponse);
     rpc TerminateSession(TerminateSessionRequest) returns (TerminateSessionResponse);
-    
+
+    rpc SystemCreateAccount (SystemCreateAccountRequest) returns (SystemCreateAccountResponse);
+    rpc SystemChangeStatus (SystemChangeStatusRequest) returns (SystemChangeStatusResponse);
+    rpc SystemUpdatePassword (SystemUpdatePasswordRequest) returns (SystemUpdatePasswordResponse);
+    rpc SystemUpdatePin (SystemUpdatePinRequest) returns (SystemUpdatePinResponse);
 }
 
 message LoginRequest {
@@ -101,4 +105,31 @@ message TerminateSessionResponse {
   string message = 2;
 }
 
+message SystemCreateAccountRequest {
+  string username = 1;
+  string password_hash = 2; // Хеш пароля генерирует Admin Service и передает сюда
+  bool is_ldap = 3;
+}
+message SystemCreateAccountResponse {
+  string account_id = 1;
+}
+
+message SystemChangeStatusRequest {
+  string account_id = 1;
+  string status = 2; // 'ACTIVE', 'BLOCKED', 'DELETED'
+}
+message SystemChangeStatusResponse { bool success = 1; }
+
+message SystemUpdatePasswordRequest {
+  string account_id = 1;
+  string new_password_hash = 2;
+}
+message SystemUpdatePasswordResponse { bool success = 1; }
+
+message SystemUpdatePinRequest {
+  string account_id = 1;
+  optional string pin_hash = 2; // null если удаляем
+}
+
+message SystemUpdatePinResponse { bool success = 1; }