Signup Abuse Defense: When CAPTCHA Gates Creation and Risk Signals Catch Up

Signup protection works best as a sequence, not a single verdict: use CAPTCHA before account creation...