Get a referral code for the authenticated user

Returns the user’s existing referral code if one was already generated; otherwise creates a new code via Fuul and persists it. Safe to call repeatedly.