mrhid6andClaude Opus 5
769839a70d
Cloud customers sign in with the control-plane credentials they already hold, so there is no second password to manage. Two accepted consequences, documented at the handler: their control-plane password now also unlocks billing, and only role owner may sign in -- admin and member are refused because billing is an owner concern. A self-hosted customer_users row wins over a control-plane user with the same address, so the precedence is chosen rather than emergent. Adds the reads of control users this needs; the write surface is still one UpdateOne on instances. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>