Adds alembic/ (async env.py driven by DATABASE_URL) and the 0001 users-table migration matching the model. enabled now has a DB-level server_default of false (secure default even for non-ORM inserts). Verified upgrade/downgrade on sqlite.
