Create signed access links for inbound user requests

Incoming signup payloads lack ready access tokens, delaying provisioning and blocking onboarding coordinators. Generate signed access links automatically so new users get secure access same day.