Invite a new staff user — issues a one-time password-set URL

Creates a row in `admin_users` with no password set, mints a single-use setup token, and returns the URL. The invitee picks a password via POST /v1/admin-auth/users/:id/redeem and immediately starts an admin session.