fix(site-replication): harden service account sync (#3500)

rustfs/src/admin/handlers/service_account.rs

@@ -581,6 +581,7 @@ impl Operation for UpdateServiceAccount {
             description: new_description.clone(),
             expiration: new_expiration,
             session_policy: sp,
+            allow_site_replicator_account: false,
         };
 
         let updated_at = iam_store

rustfs/src/admin/handlers/user.rs

@@ -1116,6 +1116,7 @@ impl Operation for ImportIam {
                                         description: None,
                                         expiration: None,
                                         status: Some(status),
+                                        allow_site_replicator_account: false,
                                     },
                                 )
                                 .await