- Users list: add eye-slash icon button per unmasked row (editor+ only)
clicking opens a compact confirmation modal inline in the list
- User detail: gate Edit / Assign / Mask buttons behind is_editor check
(button was shown to all but route already blocked readonly users)
ske087