Rename the admin example plugin to auth-admin, and let config/menu.ts hide or rename a profile-menu entry

e2e-tests/compose.full.yml

@@ -6,7 +6,7 @@
 #   docker compose -f compose.yml -f e2e-tests/compose.full.yml down -v   # tear down after
 services:
   web:
-    # The base's full depends_on applies (Hydra included — the admin plugin's OAuth2-clients
+    # The base's full depends_on applies (Hydra included — the auth-admin plugin's OAuth2-clients
     # screen needs it); only the reference plugin's upstream is added. SSO is enabled here only
     # (clean clone stays password-only): the mock provider's whole array is the env-settable form
     # Kratos offers, mapped through the committed claims jsonnet.
@@ -24,18 +24,18 @@ services:
       timeout: 4s
       retries: 30
     # plugins/ is empty in the image; bind the example plugins in so the browser flow can open the
-    # gated /scheduling/shifts page and the /admin/* screens (the admin screens ship as a drop-in
-    # plugin, mounted at /app/plugins/admin, reaching the host's Ory clients via ctx.system).
+    # gated /scheduling/shifts page and the /auth-admin/* screens (the admin screens ship as a drop-in
+    # plugin, mounted at /app/plugins/auth-admin, reaching the host's Ory clients via ctx.system).
     volumes:
       - ./examples/plugins/scheduling:/app/plugins/scheduling:ro
-      - ./examples/plugins/admin:/app/plugins/admin:ro
+      - ./examples/plugins/auth-admin:/app/plugins/auth-admin:ro
 
   # bootstrap grants the demo admin every discovered plugin's permission names, so it needs the
   # example plugins present too — else the admin lacks scheduling:read/write and the gated pages 403.
   bootstrap:
     volumes:
       - ./examples/plugins/scheduling:/app/plugins/scheduling:ro
-      - ./examples/plugins/admin:/app/plugins/admin:ro
+      - ./examples/plugins/auth-admin:/app/plugins/auth-admin:ro
 
   # Browser-facing URLs (base_url, every ui_url, the after-login redirect) move to the gateway host.
   # `--dev`: the browser hits the gateway over http, but Kratos marks cookies Secure for a