Amélioré
Signup can no longer grant admin via hidden role
New accounts always start as a client. Admin and staff roles are set only by an admin.
Signing up with a role in the account metadata no longer creates an admin. The account trigger always writes client, and privileged plan, credit, and role columns stay locked for signed-in sessions.