Protected workspace owner and safer team invites

Invites always join as Agent; only the workspace owner can make or change admins, and nobody can remove, demote or sign out the owner.