Invite a batch of members

Invites many people at once from a list of usernames/emails sharing one role and optional department/team target. Each identifier runs the full single-invite path; per-identifier failures are reported without sinking the batch, while a permission failure rejects the whole request. Same role/permission rules as the single-invite endpoint; recorded in the audit log.