Sync authenticated user to the database.

Called by the frontend after login. In firebase mode it verifies the Firebase ID token; in dual/session mode it bootstraps from the brand's session cookie (link-or-create). No registration bonus. Response returns phoneNumber from the users.phone_number column at the top level. uiLanguage is the stored profile locale when the country offers it, otherwise null — not the instance fallback.