gopherium/AlphOne

Current state: Every signed-in account opens /users and /users/new, and the menu shows Users to all of them. Without manage_users the screen hides New user, the row actions, the selection boxes and the item count, but the account list stays readable. The role column, the role filter and the Change role dialog read a role as its stored name with the first letter upper-cased, so admin reads "Admin" and member reads "Member" in every language, and neither word is in the catalog. The New user screen asks only for an email and a name, so every invitation starts as a member, although the invite mutation already takes a role and turns down one beyond the inviter's reach. A role the server does not know reads "That role is not one this deployment names.". Proposal: Only an account holding manage_users opens /users and /users/new. Any other account is sent home, and the menu hides Users from it. The users query stays as it is, so an API token with the users read scope still lists accounts. The