Temporarily disable user updates again

This reverts commit 05c0d562.

app/policies/user_policy.rb

@@ -14,7 +14,7 @@ class UserPolicy < ApplicationPolicy
   end
 
   def update?
-    user? && user.admin?
+    false
   end
 
   def destroy?

app/views/avo/partials/_sidebar_extra.html.erb

@@ -2,8 +2,10 @@
 </div>
 
 <div class="space-y-1 mb-4">
+  <% if false # temporarily hide password update so test users dont lock out one another %>
     <%= render Avo::Sidebar::HeadingComponent.new label: "Your Account" %>
     <div class="w-full space-y-1">
       <%= render Avo::Sidebar::LinkComponent.new label: "Change Password", path: avo.settings_password_path %>
     </div>
+  <% end %>
 </div>