Rollen Chunk 7: Benutzerverwaltung und Sicherung strikt Admin-only

src/app/page.test.tsx

@@ -705,7 +705,7 @@ test("shows a logout icon in the header next to the theme toggle", async () => {
     mode: "password",
     ssoEnabled: false,
     setupRequired: false,
-    user: { email: "loki@example.org", role: "admin" },
+    user: { id: "u-1", email: "loki@example.org", role: "admin" },
   });
   mockApp(true);
   render(<Home />);
@@ -726,7 +726,7 @@ test("returns to login after signing out", async () => {
       mode: "password",
       ssoEnabled: false,
       setupRequired: false,
-      user: { email: "loki@example.org", role: "admin" },
+      user: { id: "u-1", email: "loki@example.org", role: "admin" },
     })
     .mockResolvedValue({
       enabled: true,
@@ -785,7 +785,7 @@ test("shows the team tab only for team leads and admins", async () => {
       mode: "password",
       ssoEnabled: false,
       setupRequired: false,
-      user: { email: "loki@example.org", role },
+      user: { id: "u-1", email: "loki@example.org", role },
     });
     mockApp(true);
     const { unmount } = render(<Home />);
@@ -804,7 +804,7 @@ test("team tab lists members and allowances", async () => {
     mode: "password",
     ssoEnabled: false,
     setupRequired: false,
-    user: { email: "loki@example.org", role: "admin" },
+    user: { id: "u-1", email: "loki@example.org", role: "admin" },
   });
   vi.mocked(getTeam).mockResolvedValue({
     year: new Date().getFullYear(),