New Customer
Creates a customer org row, seeds the customer_rulebook with the chosen tier template, and writes a "customer_created" audit event. The .mobileconfig artifact is produced separately via the KFC subprocess (deferred per Cardinal #91 gate — Lane D1 surfaces a placeholder profile route until cross-worktree module shape is decided).