Stricter Invitations, Member Removal and Portal Settings

Team invitations and admin sign-in gained stronger protections, deleting a team member removes their access immediately while keeping every record they touched, and a client can only change their own portal settings.

• Deleting a member disables sign-in, frees the email, keeps history and returns their work to unassigned
• Portal clients can update their avatar and onboarding details, never a section the agency configured