Invite members from AI agents, safer roles

You can now invite teammates to your organization directly from connected MCP, and invites can no longer grant a role above your own.

• Added a tool to invite members by email from connected AI assistants, with the invite sent automatically.
• Prevented inviting or promoting someone to a role higher than yours, closing a privilege-escalation gap across the dashboard and API.
• Filtered the invite role picker to the roles you're allowed to grant.