Admin accounts can change their own password through a dedicated endpoint

Admins have their own password-change flow, separate from the tenant password-reset process, since admin accounts live in a completely different system.