Clear Age Block

Let somebody back in after an under-16 refusal (batch CL, 2026-09-23).

Nancy: "they can email us at support if there was a mistake." This is what support does about it. user_id here is SOMEBODY ELSE, which is allowed only because the caller is proved to be an admin by the dependency; the caller's own identity still comes from the token and never from the path.

Two shapes, and the difference matters. With a corrected date_of_birth the date is stored and RE-JUDGED, so a correction that is still under sixteen re-blocks instead of quietly opening the account. With no date it is an override: somebody looked at a document, and that is recorded in the log rather than dressed up as a birthday nobody gave us.