Invite, not public register
Staff accept an invite and set a password. Public auth register is disabled.
MODULE
Invite staff. Role templates and permission JSON decide which desk opens — owner, cashier, doctor, accountant.
Staff accept an invite and set a password. Public auth register is disabled.
Routes use PermissionGuard. Templates vary by business type (clinic, path lab, school wording).
MFA exists on auth-service. Password reset is on the login host.