Owned Email

Phase 1 is API-only. The admin UI arrives in Phase 2. See PLAN.md.