[New] Admin deep-dive (trust/safety): No member tagging / segmentation for admins, and no bulk user import

Area: Admin deep-dive (trust/safety) (audit p15a) · Surface: /admin/users (AdminUserController) · Dimension: Competitor-gap feature (#2) · Severity: enhancement

Skool, Circle, and Mighty Networks let admins tag/segment members (e.g. 'paid', 'beta', 'VIP', 'at-risk') and act on a segment in bulk; every one supports importing an existing member list via CSV during migration. Mobieus can export users but cannot import them, which makes onboarding a community that is switching FROM a competitor harder than it should be — the migration story is one-directional. And without tags, an admin can only slice members by the fixed columns (role/date), not by business-meaningful cohorts. This is a churn-reducer at signup time (smooth migration) and a retention tool afterward (segment-targeted action).

Evidence

`grep -rin 'user_tag|user_segment|member_group|segment' AdminUserController.php AdminUserActionController.php` returns nothing; no user_tags/user_segments table exists (`grep CREATE TABLE user_tags|user_segments|member_ schema.sql` returns nothing). User management offers search/filter by username/email/role/date (AdminUserController.php:49-55) and CSV export (exportCsv, line 787) but no CSV import (`grep import|fgetcsv AdminUserController.php` only matches a comment).

Suggested fix. Add a user_tags table + tag chips on /admin/users with a tag filter and bulk-tag action (reuse the existing bulkAction harness in AdminUserController.php:504), and a CSV import that mirrors exportCsv's column shape, routing new accounts through the existing mobieusID createHuman path used by store().

Filed by the automated tenant-app audit and adversarially evidence-verified. Status: verified. Open — not yet actioned.