Root-native access for the commercial product shell
If no SaaS accounts exist yet, the first successful registration becomes the owner bootstrap. After that, this lane becomes invite-only unless you configure an invite code.