Onboard a subscriber company

Create the Keycloak-backed portal account with a principal user, describe the company, then AI-propose department heads for the org map.