Portal Delete run (Super Admin), lab codes #3/#4, Z23 pointer #45, T1017 #46, payer note, login security-image wait

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/users.py

@@ -46,6 +46,7 @@ from datetime import datetime, timedelta
 ROLES = ("Super Admin", "Admin", "Viewer")
 CAN_RUN = ("Super Admin", "Admin")
 CAN_ADMIN = ("Super Admin", "Admin")    # Portal Users, Sign-in history
+CAN_DELETE = ("Super Admin",)           # Delete run (operator, 2026-10-28)
 # The roles each role may add, give, reset, disable or enable.
 MANAGES = {"Super Admin": ("Admin", "Viewer"), "Admin": ("Viewer",)}
 MIN_PASSWORD = 10