Org security & Profile UI: follow-ups from Task

Found while visually checking Task 7264 on the local stack (1280px and 375px). 1. Customers › Org › Security (and the tenant's Sign-in tab): the HIPAA "BAA effective date" field shows while HIPAA mode is off. Show it only once the switch is on, so a phone doesn't carry a dead date input. 2. Sidebar footer: a nameless account shows its email prefix ("e2e-smoke") as its name. Link it to Profile, or mark it, so the user sees there is no name to show. 3. Operator accounts still get no name prompt at first sign-in; Task 7264 only flags it on Profile. Consider a one-time prompt after sign-in for any account with a blank first and last name. Out of scope: IP allowlist rules (app/ip_allowlist.py), the console relay. Done means: - Each item is visible on the live stack at desktop and 375px, with screenshots in the report.

PR #5958 queued in the merge lane. HIPAA BAA date shows only while HIPAA is on; the sidebar marks a nameless account "No name set"; a one-time banner asks nameless accounts to add a name. Quick gate green, visual check done at 1280/375. Follow-up draft #7367 filed.