Identity conflict queue

Affinity people and companies with colliding emails or domains get parked, not overwritten, until a human picks the surviving record.

A verified migration is not a merge-all. The Pluspartners load parked identity collisions in a queue, wrote the rest, and only resolved the remainder after the dry-run ledger was inspectable.