Corporate Email Validation for SSO

New SSO registrations now require a supported corporate or work email domain. Personal email domains are blocked before an account or workspace membership is created, and the check applies only to new signups, not existing users.