Ref T7667. On the road to locking the auth config, also clean up some minor UI issues:
- Only show the warning about not Phacility instance auth if the user isn't a manager (see next diff).
- When rendering more than one warning in the guidance, add bullets.
- I didn't like the text in the auth.config-lock config setting.