Create “Super Admin” role for production announcements management

[zadenaike]

Overview

We need a dedicated Super Admin role for production that can update/manage announcements, so we can stop sharing a broad admin password and restrict announcement-edit capability going forward.

Details

This role would ideally be restricted to product managers so they can manage the announcement rollouts.

• Too many team members currently have the admin password, which also enables production access.
• We want tighter access control and better separation of duties: standard “Admin” should not be able to edit announcements, while a smaller set of trusted users (“Super Admins”) can.
• We should also support frequent password rotation / reduced blast radius for production access.
• The current "admin user" access level needs to be updated as part of creating this new "super admin" level, ensuring it doesn't include editing capabilities for announcements

Action Items

• Create a Super Admin role that can create/update/delete/publish announcements on production.
• Ensure the existing Admin role cannot edit announcements (at minimum on production; clarify for non-prod)
• Minimize the number of people with production-level announcement permissions.

[zadenaike]

May also want to consider updating super admin role so that it doesn't constantly ask admins to "verify the data" when trying to edit the announcements