**Epic:** Auth **Description** Add a User model using has_secure_password. **Acceptance criteria** - User belongs to a household - Email is required and unique (case-insensitive) - password_digest present - Migration + schema committed