Account types: explicit, not auto-detected.

Shipped: createUserWithType Cloud Function replaces the old auto-detect. Onboarding picks the right type at sign-up; production accounts can no longer flip to demo by accident.