feat(users): govern profiles and access

Normalize fixed profile fields, profile actions, and the five-column capability matrix for comments, uploads, and downloads.

src/Admin/GlobalController.php

@@ -182,9 +182,7 @@ class GlobalController extends ControllerBase {
         $params = $this->get_json_params($request);
         $allowed = [
             'resource_cpt_enabled'    => 'bool',
-            'download_login'          => 'bool',
             'download_credit'         => 'bool',
-            'download_captcha'        => 'bool',
             'search_include_resource' => 'bool',
         ];
         $sanitized = $this->sanitize_fields($params, $allowed);