userRoles last-admin trigger missing ENABLE ALWAYS (replica-mode bypass, same class as mig 101)

userRoles last-admin-removal trigger (BEFORE DELETE OR UPDATE OF deletedAt) is tgenabled='O' (default), same session_replication_role=replica bypass class migration 101 closed for the fraud tables (jtpAyudantes/comisionJtps/comisionAdjuntos) -- userRoles wasn't in that migration's scope. Found by coder-pluto-cc during PLUTO-640 triage. Fix: ALTER TABLE ... ENABLE ALWAYS TRIGGER <name>, same pattern as mig 101.