fix(ui): update bulk-action confirm prompts to match actual behavior

The delete-groups, delete-computers, disable-users, and
disable-computers confirm prompts still read "not yet implemented —
will return 501" from before the Phase 3 bulk actions landed. Review
on PR #571 flagged this as misleading: group/computer delete now go
through DeleteByDN and user/computer disable are wired to the v1.12
simple-ldap-go DisableUser/DisableComputer helpers on AD backends.

Rewording:

- Delete prompts now say "This cannot be undone." (matches the
  single-entity drawer Delete button already uses).
- Disable prompts now carry the AD caveat ("Active Directory only
  — returns 501 on OpenLDAP") because the handler is gated on
  a.ldapConfig.IsActiveDirectory and the client can't detect the
  backend from the browser. Clients on OpenLDAP see the 501 +
  bulkNotImplementedMessage contract unchanged.

Signed-off-by: Sebastian Mendel <sebastian.mendel@netresearch.de>
Signed-off-by: Sebastian Mendel <info@sebastianmendel.de>

Author: CybotTM

internal/web/static/js/v2-bulk.js

@@ -187,11 +187,19 @@
   function openDisableUsers() {
     if (selected.size === 0) return;
 
+    // Disable flips the AD userAccountControl ACCOUNTDISABLE bit (0x2)
+    // via simple-ldap-go v1.12's DisableUserContext. The endpoint is
+    // gated on a.ldapConfig.IsActiveDirectory in the Go handler; the
+    // client can't detect the backend from here, so the prompt says
+    // "only on Active Directory" rather than pretending it works
+    // everywhere. On OpenLDAP the POST returns 501 with the
+    // bulkNotImplementedMessage contract.
     if (
       !window.confirm(
         "Disable " +
           selected.size +
-          " user(s)? (Note: not yet implemented — will return 501)"
+          " user(s)? Accounts can be re-enabled later. " +
+          "(Active Directory only — returns 501 on OpenLDAP.)"
       )
     )
       return;
@@ -237,7 +245,7 @@
       !window.confirm(
         "Delete " +
           selected.size +
-          " group(s)? (Note: not yet implemented — will return 501)"
+          " group(s)? This cannot be undone."
       )
     )
       return;
@@ -250,11 +258,13 @@
   function openDisableComputers() {
     if (selected.size === 0) return;
 
+    // See openDisableUsers for the AD-only rationale.
     if (
       !window.confirm(
         "Disable " +
           selected.size +
-          " computer(s)? (Note: not yet implemented — will return 501)"
+          " computer(s)? " +
+          "(Active Directory only — returns 501 on OpenLDAP.)"
       )
     )
       return;
@@ -269,7 +279,7 @@
       !window.confirm(
         "Delete " +
           selected.size +
-          " computer(s)? (Note: not yet implemented — will return 501)"
+          " computer(s)? This cannot be undone."
       )
     )
       return;