feat(plugin-auth): the bulk import admits manager_id, resolved in a second pass through the admin write surface's own refusals

feat(plugin-auth): the bulk import admits manager_id, resolved in a second pass through the admin write surface's own refusals #24855