Create a user + org + owner membership; return one-time setup URL

For internal-team onboarding. Admin posts {email, name, orgName}; we create the user (no password), the org, an owner membership, and a one-time setup token. The returned setupUrl can be DM'd to the new user — they set a password and gain a live session.