Function removeFlushOperator

Revoke operator's access to plp::finish_flush. Admin-only. Bypasses the version gate, like remove_settled_redeem_keeper, so revocation stays available under the emergency freeze and from a package version below the runtime floor. Aborts if operator is not allowed.