PATCH {name} | {email, verified?} (accounts.update, step-up; package 7): admin/src/admin/customer-routes.ts.Staff cookie session; permission accounts.update; fresh password + TOTP step-up (10 minutes). Write requests need same-origin JSON and X-Admin-CSRF from this session.Source snapshot: admin/src/app/api/admin/accounts/[sub]/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative.