Change a user's plan.

Writes the stored plan column. It is not the whole story of what a customer has — lifetime access, a paid or granted trial and inherited team access all live outside it, which is why the account payload reports both plan (in effect) and base_plan (stored).

Admin only. The authenticated account must have the admin role.