refactor(users): migrate system.user to system.users[] for multi-user support

Replace the single-user system.user dict with a system.users list to
support multiple user accounts. Update all roles, templates, examples,
validation, and documentation to use the new format. Remove redundant
post-normalization type checks from validation.yml.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

vars_example.yml

@@ -55,11 +55,11 @@ system:
         fstype: xfs
         label: DATA
         opts: defaults
-  user:
-    name: "ops"
-    password: "CHANGE_ME"
-    keys:
-      - "ssh-ed25519 AAAA..."
+  users:
+    - name: "ops"
+      password: "CHANGE_ME"
+      keys:
+        - "ssh-ed25519 AAAA..."
   root:
     password: "CHANGE_ME"
   luks: