Decouple superuser from SessionMetadata

Superuser should only be settable via the tool (see []
which is merged in here but not diffbased, and which removes
the implicit superuser for CharlestonRoad). It is a property
of the request, not of the session (there are no sessions in the tool).
-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=125204707

java/google/registry/flows/EppConsoleAction.java

@@ -44,6 +44,7 @@ public class EppConsoleAction implements Runnable {
         new HttpSessionMetadata(session),
         new GaeUserCredentials(getUserService().getCurrentUser()),
         false,  // This endpoint is never a dry run.
+        false,  // This endpoint is never a superuser.
         inputXmlBytes);
   }
 }