fix(admin): secure proxied model mutations

frontend/tests/admin-contracts.test.ts

@@ -225,7 +225,7 @@ test("Refine dependencies and same-origin admin data provider are present", () =
 });
 
 test("administrator writes require scoped email OTP reauthentication without mandatory MFA", () => {
-  assert.match(adminHttp, /isSameOriginAdminMutation/);
+  assert.match(adminHttp, /isTrustedAdminMutationRequest\(request, process\.env\.ADMIN_USER_ORIGIN\)/);
   assert.match(administratorsRoute, /requireHighRiskAdminMutation\(request, "admin\.users\.manage_roles"\)/);
   assert.match(adminHttp, /requireAdminMutation\(request, permission\)[\s\S]*verifyHighRiskAdminProof/);
   assert.doesNotMatch(adminHttp, /requireAdminMfaIfRequired/);