Single-user mode should disable pod creation #257

--single-user mode still allows anyone to create new pods via POST /.pods. This is unexpected — single-user implies only one user on the server.

The endpoint should return 403 when --single-user is enabled.