When a customer creates their first bucket and has no S3 account yet,
BucketsService now creates one automatically via AccountsService::create()
inside runAsAdmin() instead of throwing a NotAllowedException.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>