Add /lockedUsers and /unlock admin-only endpoints backed by
LoginAttemptService unlock/getLockedUsers, wire shared session
management configurer for session limiting, and serve an unlock.html
admin page. Bump parent/config/crypto to product-v1-1.1.0-beta2 and
manage config/crypto versions via dependencyManagement.