fix: address verified review findings (admin-webhooks-keys-1)

Signed-off-by: bircni <bircni@icloud.com>

docs/migration-1.0.md

@@ -254,6 +254,10 @@ Renamed flags that appear on many commands:
 | `--inactive` (webhook) | `--active=false` |
 | `--expires` / `-x` (milestones create) | `--deadline` |
 | `--kind issue\|pull` (milestones issues) | `--kind issues\|pulls\|all` |
+| `--no-admin`, `--no-restricted`, `--inactive`, `--no-allow-git-hook`, `--no-allow-import-local`, `--no-allow-create-organization` (admin users edit) | `--admin=false`, `--restricted=false`, `--active=false`, `--allow-git-hook=false`, and so on |
+| `--allow-login` (admin users edit) | `--prohibit-login=false` |
+| `--password-stdin`, `--no-must-change-password` (admin users) | `--password-file -`, `--must-change-password=false` |
+| `-u`, `-p`, `-e` (admin users create) | the username argument or `--username`, `--password`, `--email` |
 | `--out` (man) | `--output-file` / `-o` |
 
 Other long names changed too, mostly on `admin user`, `repo fork`, `repo edit` and
@@ -400,6 +404,8 @@ archive, or run `make docs`.
   on every call, because Gitea replaces it: pass `--authorization-header`,
   `--authorization-header-file` or `--clear-authorization`. The signing secret
   cannot be edited; recreate the hook to rotate it.
+- `admin user edit --password` no longer forces a password change at the next sign-in
+  (`admin user create` still does); add `--must-change-password` to require one.
 - `notification mark-read`, `mark-unread`, `pin` and `unpin` act on the given IDs;
   pass `--all` to apply them to every notification matching the filters.
 - `--no-input` disables prompts, editors and browsers. With `--json`, tea never