Add a client (partner admins only)

Creates the client's Clerk organization (instance default member limit, nobody added implicitly), its account with one empty default business organization, links it to the partner and grants the caller admin. 502 CLERK_FAILED when Clerk refuses the organization (nothing is recorded).