Provisions a personal/default org for the authenticated user if they do not already belong to one. This is the explicit "skip invites" path during signup. Idempotent: returns the existing org when one is present.