Create employee accounts when hire reaches onboarding stage

Candidates move to hired stage without workspace or accounts, forcing teams to provision access manually and delaying onboarding. Create accounts automatically so onboarding completes today.