weichen
924c3033a9
Why: the user replaced the stage-2 email self-registration sketch with admin-issued accounts (2026-09-30): no self registration, admin sets initial passwords, first login after creation or reset forces a change. Evidence: R2 landed on feature/auth-admin-accounts (migration v10, auth/session APIs, CLI user subcommands, login page + forced change gate + admin user management); store/e2e tests and a full headless journey on the real binary are green (see that task's PR). Impact: proposal status line only; section 5.1 sketch superseded.