Bootstrap the first customer user + an initial org

Single one-shot public registration endpoint for the customer-side `users` table. Fails with 409 once any customer user exists; after that, new users must be invited by Questflow staff via /v1/auth/register. (Staff identity is bootstrapped separately via /v1/admin-auth/bootstrap.)