Adds /api/users endpoints (admin only) plus /api/users/assignable
(admin + technician) used by the aftersales reassign picker. Guards
prevent self-demotion, self-deletion, and removing the last admin.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Frudrax Cheng