admin: invite links without a username

Leaving the username empty when creating a user makes the account
invite-<hex>; the invitee picks the real username on the invite page
(taken names and the invite- prefix are refused). Without an email this
gives a plain invite link to share.

Assisted-by: Claude:opus-5

views/admin/users/form.erb

@@ -14,7 +14,7 @@
         <input type="hidden" name="authenticity_token" value="<%= csrf_token %>" />
         <fieldset class="plain" <%= 'disabled' unless editable %>>
         <div class="invoice-grid">
-            <div class="field"><label for="username">Username</label><input type="text" id="username" name="username" value="<%= @user.username %>" <%= fresh || current_user.superuser ? 'required pattern=[a-z0-9][a-z0-9_.@-]{1,63}' : 'disabled' %> /></div>
+            <div class="field"><label for="username">Username<% if fresh %> <span class="optional">(optional)</span><% end %></label><input type="text" id="username" name="username" value="<%= @user.username %>" <%= fresh ? 'pattern=[a-z0-9][a-z0-9_.@-]{1,63} placeholder="leave empty: invitee chooses"' : (current_user.superuser ? 'required pattern=[a-z0-9][a-z0-9_.@-]{1,63}' : 'disabled') %> /></div>
             <div class="field"><label for="name">Name <span class="optional">(optional)</span></label><input type="text" id="name" name="name" value="<%= @user.name %>" /></div>
             <div class="field"><label for="email">Email <span class="optional">(for invite and password reset)</span></label><input type="email" id="email" name="email" value="<%= @user.email %>" /></div>
         </div>

views/admin/users/index.erb

@@ -25,7 +25,7 @@
                     <td><%= perm_summary(u) %></td>
                     <td>
                         <% if !u.active %><span class="badge badge-pending">disabled</span>
-                        <% elsif !u.password_digest %><span class="badge badge-pending">invited</span>
+                        <% elsif !u.password_digest %><span class="badge badge-pending">invited</span><% if u.choose_username %><br /><span class="optional">picks own username</span><% end %>
                         <% else %><span class="badge badge-paid">active</span><% end %>
                     </td>
                     <td class="mono"><%= u.last_login_at&.strftime('%Y-%m-%d %H:%M') || '—' %></td>