docs(IAccessManager): document locked roles for label/admin/guardian/grantDelay (#6041)

Author: Forostovec

contracts/access/manager/IAccessManager.sol

@@ -196,6 +196,7 @@ interface IAccessManager {
      * Requirements:
      *
      * - the caller must be a global admin
+     * - `roleId` must not be the `ADMIN_ROLE` or `PUBLIC_ROLE`
      *
      * Emits a {RoleLabel} event.
      */
@@ -254,6 +255,10 @@ interface IAccessManager {
      * Requirements:
      *
      * - the caller must be a global admin
+     * - `roleId` must not be the `ADMIN_ROLE` or `PUBLIC_ROLE`
+     *
+     * NOTE: Setting `admin` to the `PUBLIC_ROLE` is allowed, but the target `roleId` itself
+     * must not be a locked role (`ADMIN_ROLE` or `PUBLIC_ROLE`).
      *
      * Emits a {RoleAdminChanged} event
      */
@@ -265,6 +270,10 @@ interface IAccessManager {
      * Requirements:
      *
      * - the caller must be a global admin
+     * - `roleId` must not be the `ADMIN_ROLE` or `PUBLIC_ROLE`
+     *
+     * NOTE: Setting `guardian` to the `PUBLIC_ROLE` is allowed, but the target `roleId` itself
+     * must not be a locked role (`ADMIN_ROLE` or `PUBLIC_ROLE`).
      *
      * Emits a {RoleGuardianChanged} event
      */
@@ -276,6 +285,7 @@ interface IAccessManager {
      * Requirements:
      *
      * - the caller must be a global admin
+     * - `roleId` must not be the `PUBLIC_ROLE`
      *
      * Emits a {RoleGrantDelayChanged} event.
      */