CSV user import

Upload a UTF-8 CSV (max 10MB). Each row is validated individually — valid rows are committed even when others fail.