post:
  operationId: createStaffUser
  summary: Create a staff user
  description: |
    Permission: **OWNER only**

    - `username` must be pre-generated via `GenerateStaffUsername` and passed by the client.
    - Password is auto-generated by the system (min 12, max 24 chars; ≥1 uppercase, lowercase, number, special char).
    - New account defaults: `status = Active`, `2FA = Not Configured`.
    - System sends credentials to staff email **asynchronously** — email failure does not roll back the account.
  tags: [staffManagement]
  security:
    - bearerAuth: []
  requestBody:
    required: true
    content:
      application/json:
        schema:
          $ref: "../../components.yaml#/components/schemas/CreateStaffRequest"
        example:
          first_name: "Jane"
          last_name: "Doe"
          second_last_name: "Smith"
          email: "jane.doe@nova.com"
          phone: "+5219981234567"
          role: "ADMIN"
          username: "nova.jdoe.43"
  responses:
    "200":
      description: Staff user created — DTO returned directly
      content:
        application/json:
          schema:
            $ref: "../../components.yaml#/components/schemas/CreateStaffResponse"
          example:
            code: 0
            message: "success"
            staff_id: "6643f1a2b4c5d60012e34abc"
            username: "nova.jdoe.43"
    "400":
      $ref: "../../components.yaml#/components/responses/Failure"