pub async fn create_group(db: &Db, name: &str, description: &str) -> Result<i64>Expand description
Idempotent. A second call with the same name returns the
existing group’s id; the stored description is preserved
(first-write-wins). Mirrors the permission_id upsert idiom
in this module.