The user_to_acl table is one of the few join tables that does NOT follow
the tablename_fieldname column naming convention — its columns are the
plain `user_id` and `acl_id`. The previous version used `user_to_acl_user_id`
and `user_to_acl_acl_id` which fail with "Unknown column".
Found by actually running bootstrap-db.sh end-to-end against a fresh DB
(was missing this verification step on the initial commit).
Verified now:
- schema loads cleanly (36 tables)
- seed loads (3 ACL roles, 8 email templates)
- default users insert + ACL mapping works
- password_verify against argon2id hashes confirms admin123 and test123