feat(idp): provide auto only options (#8420)

# Which Problems Are Solved

As of now, **automatic creation** and **automatic linking options** were
only considered if the corresponding **allowed option** (account
creation / linking allowed) was enabled.

With this PR, this is no longer needed and allows administrators to
address cases, where only an **automatic creation** is allowed, but
users themselves should not be allowed to **manually** create new
accounts using an identity provider or edit the information during the
process.
Also, allowing users to only link to the proposed existing account is
now possible with an enabled **automatic linking option**, while
disabling **account linking allowed**.

# How the Problems Are Solved

- Check for **automatic** options without the corresponding **allowed**
option.
- added technical advisory to notify about the possible behavior change

# Additional Changes

- display the error message on the IdP linking step in the login UI (in
case there is one)
- display an error in case no option is possible
- exchanged deprecated `eventstoreExpect` with `expectEventstore` in
touched test files

# Additional Context

closes https://github.com/zitadel/zitadel/issues/7393

---------

Co-authored-by: Stefan Benz <[email protected]>

console/src/assets/i18n/zh.json

@@ -2057,10 +2057,10 @@
       "ISAUTOCREATION_DESC": "如果选择了，如果账户还不存在，就会创建一个账户。",
       "ISAUTOUPDATE": "正在自动更新",
       "ISAUTOUPDATE_DESC": "如果选择，账户将在重新认证时更新。",
-      "ISCREATIONALLOWED": "是否允许创作",
-      "ISCREATIONALLOWED_DESC": "确定是否可以创建账户。",
-      "ISLINKINGALLOWED": "是否允许连接",
-      "ISLINKINGALLOWED_DESC": "确定一个身份是否可以与一个现有的账户相联系。",
+      "ISCREATIONALLOWED": "允许创建账户（手动）",
+      "ISCREATIONALLOWED_DESC": "确定是否可以使用外部账户创建账户。如果用户在启用自动创建时不应该能够编辑账户信息，请禁用。",
+      "ISLINKINGALLOWED": "允许链接账户（手动）",
+      "ISLINKINGALLOWED_DESC": "确定是否可以手动将身份链接到现有账户。如果用户只能在激活自动链接的情况下链接建议的账户，请禁用。",
       "AUTOLINKING_DESC": "确定是否提示将身份链接到现有帐户。",
       "AUTOLINKINGTYPE": {
         "0": "已禁用",