fix: team invite role resolution, user cleanup, and settings page redesign

- Resolve org role names to Logto role IDs in invite and role change flows
  (fixes entity.relation_foreign_key_not_found on invite)
- Handle existing Logto users on re-invite instead of failing with
  email_already_in_use
- Delete users from Logto when removed from last org membership
- Consolidate tenant settings page into 3 cards: Tenant Details, MFA,
  Authentication Policy — remove duplicate MFA Enforcement and Change
  Password (now in Account Settings)
- Make passkey list scrollable

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

ui/src/components/account/MfaSection.tsx

@@ -21,7 +21,7 @@ import {
 } from '../../api/account-hooks';
 import styles from '../../styles/platform.module.css';
 
-export function MfaSection() {
+export function MfaSection({ bare }: { bare?: boolean }) {
   const { toast } = useToast();
   const { data: mfaStatus, isLoading: statusLoading } = useAccountMfaStatus();
   const setup = useAccountMfaSetup();
@@ -121,18 +121,12 @@ export function MfaSection() {
   }
 
   if (statusLoading) {
-    return (
-      <Card title="Multi-Factor Authentication">
-        <div style={{ display: 'flex', justifyContent: 'center', padding: 24 }}>
-          <Spinner />
-        </div>
-      </Card>
-    );
+    const spinner = <div style={{ display: 'flex', justifyContent: 'center', padding: 24 }}><Spinner /></div>;
+    return bare ? spinner : <Card title="Multi-Factor Authentication">{spinner}</Card>;
   }
 
-  return (
+  const content = (
     <>
-      <Card title="Multi-Factor Authentication">
         <div style={{ display: 'flex', alignItems: 'center', gap: 12, marginBottom: 12 }}>
           <span className={styles.description} style={{ margin: 0 }}>Status:</span>
           {mfaStatus?.enrolled ? (
@@ -179,7 +173,12 @@ export function MfaSection() {
             </div>
           </>
         )}
-      </Card>
+    </>
+  );
+
+  return (
+    <>
+      {bare ? content : <Card title="Multi-Factor Authentication">{content}</Card>}
 
       <Modal
         open={modalOpen}