Set up a customer or provider account in a flow that is ready for real auth later

The signup page validates user input, stores a mock session, and follows the same service boundary that a future Supabase auth layer can reuse.