The prod users table has account_id NOT NULL. The backfill migration and
ensure_service_account() now create a 'ResolutionFlow System' account
(display_code RF-SYS-1) before inserting the service user, satisfying the
constraint on all environments.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>