Create a new saved reply. The handle is derived from title if not supplied. Handles are unique per organization (excluding soft-deleted rows).

Visibility model:

• Pass isPrivate: true to make the reply private to the OAuth session's user (sets userId, clears roles).
• Pass roles to restrict the reply to users with one of those roles (clears userId).
• Pass neither for an organization-wide public reply.