Create user API contract and validation

Scenario

A `POST /users` endpoint creates users in an admin portal. It accepts name, email, role, teamId, locale, and optional invitation message. Only admins can create users, and duplicate emails should be rejected.