Create Business Wallet

Public route (wallets/register/** whitelisted), but requires the caller to already be authenticated as the owning user (personal wallet + KYC done first). Multipart request - device-signature filter is skipped for multipart bodies regardless.