fix(auth): clarify updateUserById applies changes directly

[7ttp]

Summary

Users expected updateUserById({ email, email_confirm: false }) to require user confirmation before applying the email change. The admin API intentionally applies changes directly.

Problem

The documentation for updateUserById and email_confirm/phone_confirm was ambiguous, leading users to believe setting email_confirm: false would prevent immediate email updates.

Solution

Clarified documentation:

• updateUserById: "Changes are applied directly without confirmation flows"
• email_confirm: "Sets the user's email as confirmed when true, or unconfirmed when false"
• phone_confirm: "Sets the user's phone as confirmed when true, or unconfirmed when false"

Related

• Closes #1307

[coveralls]

coverage: 80.997%. remained the same when pulling 7d708c8524899bc063ed9351ee8ed6788427cc3c on 7ttp:fix/tsdoc1 into 09aa10628b00cbdf65ace0f9e8e79237e7c0c1dc on supabase:master.