Add phase 6 PAN login invitation and client identity

app/modules/core/iam/invite_service.py

@@ -87,6 +87,11 @@ def accept_invite(db: Session, token: str, password: str) -> User | None:
     user.is_active = True
     record.used_at_utc = utcnow().replace(tzinfo=None)
     db.commit()
+    try:
+        from app.modules.client_identity.service import mark_identity_activated
+        mark_identity_activated(db, user.id)
+    except Exception as exc:
+        print(f"[CLIENT IDENTITY ACTIVATION WARNING] user={user.id} error={exc}")
     return user
 
 

app/modules/core/iam/templates/login.html

@@ -8,8 +8,8 @@
       <input type="hidden" name="csrf_token" value="{{ csrf_token }}" />
 
       <label class="grid gap-1">
-        <span class="text-sm text-slate-600">Email</span>
-        <input class="border rounded-xl px-3 py-2" name="email" type="email" required />
+        <span class="text-sm text-slate-600">Email or PAN</span>
+        <input class="border rounded-xl px-3 py-2" name="email" type="text" autocomplete="username" required />
       </label>
 
       <label class="grid gap-1">