Tenant enrollment and account state fixes (PR #782)

Release Notes

Summary

This update improves organization invitation enrollment and makes
suspended user status consistent for tenant administrators. Invited
users can complete enrollment without triggering a blocked public
signup flow, and admins now see disabled internal users as suspended
in the identities view.

Changes

• Organization invitation links no longer force a public signup
  screen. Auth0 now selects the appropriate login or invited account
  creation flow, which allows invited users to enroll when public
  signup is disabled.
• Disabled internal users are shown as suspended in the admin
  identities list, matching the tenant account state. The underlying
  Auth0 account is not modified when a user is disabled in the
  workspace.
• Organization bootstrap binding to Auth0 Organizations is now
  idempotent, reducing setup errors during tenant provisioning.

Impact

Behavior change: Invited users should be able to accept organization
invitations without encountering a signup error. Tenant administrators
will see suspended status for disabled internal users instead of an
active status that did not reflect access state.

No customer action required.

Classification

• Auth
• Admin
• UI
• Tenant Workflow
• Bug Fix

Source: cursor-automation | PR #782: fix(auth): align tenant enrollment and account state | https://github.com/EpykLab/stllr/pull/782