After login/activation, show a full-screen loader while company settings
resolve, then force the user onto /settings/company and block navigation to
any other route until the company info is filled in. The gate releases once the
company record has a name; fails open on API error so a transient failure can
never lock the user out.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>