Public endpoint — no authentication required. Creates a UserProfile, Plan, Contract and PasswordSetupToken in one call.

POST /contracts/create/

Returns the setup token so the frontend can redirect the user to the password creation screen.