feat: user invite flow, deactivate/delete, favicon, dashboard loading fix, admin full-width

- Invite flow: admin can invite users by email with role selection; accept-invite page
  sets password and creates the account; 72-hour token expiry; E2E tests
- User deactivate/reactivate/delete: new tRPC procedures + UI buttons; deactivation
  revokes all active sessions immediately; delete cascades vacation/broadcast records;
  isActive field added via migration 20260402000000_user_isactive
- Auth: block login for inactive users with audit entry
- Favicon: SVG favicon + ICO/PNG fallbacks (16, 32, 180, 192, 512px); manifest updated
- Dashboard: GridLayout dynamic-import loading skeleton prevents blank dark area
  on first login before react-grid-layout chunk is cached
- Admin users: remove max-w-5xl constraint so table uses full page width
- Dev: docker container restart workflow documented in LEARNINGS.md; Prisma generate
  must run inside the container after schema changes (named node_modules volume)

Co-Authored-By: claude-flow <ruv@ruv.net>

packages/api/src/__tests__/user-procedure-support.test.ts

@@ -134,7 +134,7 @@ describe("user-procedure-support", () => {
     });
   });
 
-  it("normalizes dashboard layouts before returning them", async () => {
+  it("returns null layout when stored widgets have no valid type (bug #27 guard)", async () => {
     const findUnique = vi.fn().mockResolvedValue({
       dashboardLayout: {
         widgets: [{ id: "peakTimes", position: { x: 0, y: 0, w: 4, h: 3 } }],
@@ -146,8 +146,9 @@ describe("user-procedure-support", () => {
       user: { findUnique },
     }));
 
+    // Widgets with unknown types normalise to empty → return null so client uses default
     expect(result).toEqual({
-      layout: { version: 2, gridCols: 12, widgets: [] },
+      layout: null,
       updatedAt: new Date("2026-03-30T18:00:00.000Z"),
     });
   });