Production: registration triggers admin approval + welcome email with password setup (per agreement).