Clear brute-force lock state for a health system's portal accounts.

Without this the only recovery from a lockout was re-provisioning, which rotates the passphrase and forces the hospital through another reset — a heavy remedy for someone else's five wrong guesses. Locks are now scoped to (username, ip), so this is a support tool rather than the sole defence, but an operator still needs a way to say "clear it now".