P0: Identity schema (users, organizations, memberships, roles)

Imported from GitHub issue El-SaMa/oma#7 by @El-SaMa.

Create core identity tables linking Supabase auth users to organizations with role-based memberships.

Done when: migration applied; seed creates an org with an owner.