Register, verify your email, then wait for admin approval.

New users are created with pending status. Approval unlocks the protected member routes and any future admin role assignment stays separate.