feat(api): harden form options with location parents, immutability, and pagination

enforce location parent rules and immutable option values, clamp option
limits, guard hard deletes with a reference scan, paginate the admin index
with a location-groups endpoint, resolve stored labels for deactivated
options, and treat like wildcards in search terms as literals.