Phone Login Admin Operations — Exact Lookup, Profile Updates, and Controlled Deletion

Short answer: model every admin action as a validated, auditable, recoverable state transition; use the user ID after lookup, and put deletion behind an explicit policy check. This is the constraint that changes the design. A media app adding phone one-time-code login still needs an admin console that can find the right account, correct a profile,...