- Hide the 'Manage Accounts' entry behind the ManageBankAccounts Pennant
feature, active only for the admin user (ADMIN_EMAIL). The controller also
enforces the flag so the routes can't be reached directly.
- Exclude non-transactional account types (loan, investment, retirement, real
estate) from change-destination/link targets, on the frontend list and
enforced server-side via AccountType::canSyncBankTransactions().
- Stop syncing now asks for confirmation, explaining the account becomes a
manual account that keeps its transactions but stops importing new ones.