feat(jira): admin account replaces per-user tokens for all Jira/Tempo ops

- Single admin Jira account stored in system_configs (jira.admin_email, jira.admin_api_token)
- Admin Tempo token in system_configs (tempo.admin_token)
- get_admin_jira_client() + has_admin_jira_configured() replace per-user auth in all lifecycle hooks
- lookup_user_jira_account_id() auto-discovers each user's Atlassian accountId by email on login
- auto_log_test_worklog() now uses admin Tempo token and logs both red+blue team time
- Settings > Jira: admin credentials fields + test buttons moved to admin Jira tab
- Profile section simplified: jira_account_id shown read-only (auto-detected)

backend/app/routers/evidence.py

@@ -237,14 +237,14 @@ def _attach_evidence_to_jira(
 ) -> None:
     """Attach uploaded evidence to the linked Jira ticket (non-fatal)."""
     try:
-        from app.services.jira_service import get_test_jira_key, get_user_jira_client, has_jira_configured
-        if not has_jira_configured(actor, db):
+        from app.services.jira_service import get_test_jira_key, get_admin_jira_client, has_admin_jira_configured
+        if not has_admin_jira_configured(db):
             return
         issue_key = get_test_jira_key(db, test_id)
         if not issue_key:
             return
         import io
-        jira = get_user_jira_client(actor, db)
+        jira = get_admin_jira_client(db)
         buf = io.BytesIO(content)
         buf.name = file_name  # requests uses .name as the multipart filename
         jira.add_attachment_object(issue_key, buf)