Admin lever to clear a profile-photo block (and handle self-deleted photos re-entering the ladder)

MARS-580 precondition (b) of 2, both required before BLOCKING_RUNG_ENFORCED can go back to true in src/lib/profile-photo-nag.ts. Today there is NO staff-side remedy for a blocked student. Soporte is reachable from the block panel by design, but an admin who receives that ticket has no lever to pull. MARS-580's own text requires 'soporte reachable + admin clear' as the escape hatch for the MARS-567 lockout class. Also unresolved from MARS-580 Q4: deleteProfileImage lets a student clear their own photo and re-enter the ladder, landing straight at the blocking rung because visit days only accumulate and never reset. Decide whether self-deletion should be allowed at all while the requirement is in force, or whether it should reset the ladder epoch for that student. Scope to decide with Elazar/PM before building: does 'clear' mean a grace window, an exemption flag, or an admin-uploaded photo on the student's behalf. Class-A if it introduces a permission-gated admin action - design ping BEFORE implementing, per MARS-580's classification.