Changes to Live account status (invite sent / verification required / verified) for every user in the clinic, read straight from Firebase so a manager sees a verification the moment it happens rather than whenever someone's token next refreshes. Separate from `GET /users` so a Firebase hiccup costs the badges, not the list.