Audit Terra clinical mutation authority separately from authorship

Separate TERRA-277 follow-up: inventory Terra practice mutation actions outside the three clinical authorship gates, including correction, postoperative and image actions. For each call path, measure whether admin/bedel access is intentional or accidental; /admin/correcciones behind requireAdmin is an intended admin amendment capability and must not be narrowed by the authorship ruling. Distinguish record creation from amendment, identify app and DB predicates, then seek a separate PM/audit scope ruling before any Class-A change. Read-only census/design first; no DDL or app edit authorized by TERRA-277. Done: enumerated mutation sites, current roles and observed use, explicit decision on any needed changes, no silent copy of the alumno/docente/jtp authoring set.