#3172 Docs: restricted-model-types covers edit, delete, data delete/rename and workflow step changes

What changed

swamp-club#3131 extends restricted-model-types in swamp serve. Admin on access:* was already required to create or run a model of a restricted type. It is now also required to:

• edit a restricted model (including renaming or retagging it)
• delete a restricted model, by id or by name
• delete or rename a restricted model's data
• change a stored workflow step that runs a restricted model, including renaming or moving the step. A changed step with a computed model target, or one running a control-plane model, also needs admin.

These stay unchanged: reads (get, search, output, history), data gc, data prune and run gc, and workflow input defaults and trigger inputs (a caller with run on a workflow already chooses its inputs at run time). Data from other models that a restricted model reads is tracked in swamp-club#3171.

Pages to update

• content/manual/reference/swamp-serve/authorization.md, section Restricted model types (and the comparison with restricted commands): replace create or run with the full list above.
• content/manual/reference/swamp-serve/serve-flags.md, the --restricted-model-types row.
• content/manual/reference/swamp-serve/daemon.md, the --restricted-model-types row.
• content/manual/how-to/swamp-serve/real-world-scenarios.md: check the wording near the restricted-model-types examples.

Separate from swamp-club#3134, which covers the any-@-spelling matching and the restriction warnings.