Create your RLS demo account

Same role/attribute shape as the seeded demo users. Your account is created disabled — an existing Keycloak admin has to approve it in Keycloak's own Admin Console before you can access anything.