- Hide the 'Manage Accounts' entry behind the ManageBankAccounts Pennant
feature, active only for the admin user (ADMIN_EMAIL). The controller also
enforces the flag so the routes can't be reached directly.
- Exclude non-transactional account types (loan, investment, retirement, real
estate) from change-destination/link targets, on the frontend list and
enforced server-side via AccountType::canSyncBankTransactions().
- Stop syncing now asks for confirmation, explaining the account becomes a
manual account that keeps its transactions but stops importing new ones.
Add a per-connection account management screen for Enable Banking so users
can revisit the accounts they skipped (or want to re-target) after the
initial connection flow.
- Known accounts render from the DB with no provider call; users can stop
syncing an account (it becomes a non-destructive manual account, keeping
its transactions) or move syncing to another manual account.
- A 'Load accounts' button re-fetches the consent's account list from the
provider on demand (getSession + getAccount for unknown uids) to surface
newly available accounts, which can then be created or linked.
- The provider is only ever hit on refresh; mutations are DB-only.