SUP-50619 Add admin console UI to add/replace/disable partner admin secrets

[bw-kaltura]

Summary

• Adds an "Admin Secret Rotation" section to Partner -> Configure -> Security with buttons to Add / Replace (promote to primary) / Disable a partner's admin secrets, plus a read-only view of the current primary and enabled additional secrets.
• Replaces the manual addSecret.php / setPrimarySecret.php / disableSecret.php CLI scripts with a proper admin-console API service (adminSecretAdmin: get/add/replace/disable), gated to partner -2 like the other adminConsole plugin services.
• Seeds the required API action permissions for partner -2 via a deployment migration script.

Test plan

• Run the permission migration (deployment/updates/scripts/add_permissions/2026_08_05_add_admin_secret_admin_permission.php) against a target environment before this ships, so the new adminconsole_adminsecretadmin action permissions exist.
• Open Partner -> Configure for a test partner, confirm "Admin Secret Rotation" appears under Security with a "Manage Admin Secrets" button.
• Add a new secret (auto-generated and explicit), confirm it appears in the additional secrets list.
• Replace the primary secret with an additional one, confirm the old primary becomes an additional secret.
• Disable an additional secret, confirm it's removed; confirm the primary secret cannot be disabled.

[github-actions]

@github-copilot suggest