Owner bootstrap

Create the first Continuova vault account

The first registered user becomes Owner. Later registrations start with restricted read-only access until an Owner changes their role.