docs

clarify fedadmin role in Users/Roles

add ldap/oidc/saml exceptioin for promotion to primary.

add note that only admins can promote cluster to primary

explain admission control criteria

5.1.2 updates