Two fixes in response to review:
1. Use options.normalizeAccountId (caller-provided) instead of the
imported normalizeAccountId when building the reverse map in
everyAccountHasOwnTokens. Ensures the reverse map keys match the IDs
returned by listConfiguredAccountIds() when a custom normalizer is used.
2. Filter disabled accounts before the everyAccountHasOwnTokens gate.
Disabled accounts are skipped at channel startup; allowing them to block
default injection would prevent the base account from starting in mixed
enabled/disabled configs where all enabled accounts are independent.