2ea9c6fda0
The mustChangePassword guard redirected an impersonating admin to /change-password, which sits outside the student layout (no return-to-admin banner) — a dead end. Skip the guard when impersonating, and add the stop-impersonate banner to the change-password page as a fallback. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>