Super-admin endpoint. Edits role defaults (insert/delete) for a project, enforcing global locks.

Expected body: { "role": "photographer", "changes": { "sharelinks.create": true, "images.delete": false } }