Accept an invitation as the authenticated user.

An invitation sent to an email address is only accepted by the account signed in under that address. Idempotent for the same acceptor.

The invitation is committed as accepted before membership is granted, and it grants membership only until that grant is recorded: a graph outage on the first call is retried, a replay of a used link grants nothing, and a removal racing the accept wins.