signUpEmail silently returns synthetic user when autoSignIn: false and email already exists
When autoSignIn: false is set, auth.api.signUpEmail() returns a synthetic user object instead of throwing an APIError for duplicate emails. This makes it impossible to detect the duplicate from server actions or API callers — response.user is truthy and no exception is raised.
