Access-request form: /solicitar-acceso is a dead end, accessIssueReports never written

accessIssueReports exists with reasonValue/body/statusValue/resolvedToUserId/resolvedBy and holds ZERO rows because nothing writes it. /solicitar-acceso is a static informational page: it says "Escribinos" with no form, no link, no mailto and no submit. A locked-out user has literally no next action, and nobody can see that they tried. Needs: (a) submit form on /solicitar-acceso writing accessIssueReports, session-derived supabaseAuthId/sessionEmail, caller supplies only reason + body; (b) staff review surface to match a request to an existing users row and record resolvedToUserId/resolvedBy. Blocks every new user of every app, not just portalPen. Class-A - auth-adjacent write path from an ungranted session.