fix(settings): hide can_edit=1 keys on superadmin settings page

Filter program settings UI by generated system-key allowlist so editable
tenant settings (e.g. montzar_product_id) never appear in superadmin.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/pages/ProgramSettingsPage.vue

@@ -38,6 +38,7 @@ import {
   normalizeSettingRow,
   resolveSettingFieldType,
 } from '@/config/khanegiSettingCatalog'
+import { isSuperAdminSystemSettingKey } from '@/config/superAdminSettingKeys'
 import type { KhanegiSettingRow } from '@/config/khanegiSettingRow'
 import { useAuthStore } from '@/stores/auth'
 
@@ -133,6 +134,7 @@ const filteredRows = computed(() => {
   const q = search.value.trim().toLowerCase()
   return [...items.value]
     .filter((row) => {
+      if (!isSuperAdminSystemSettingKey(row.key)) return false
       if (!isSettingVisible(row.key)) return false
       if (filterType.value && resolveSettingFieldType(row) !== filterType.value) return false
       if (!q) return true