When Evotor sends a password in the payload, hash and store it immediately and set the user to active — skipping the invite flow. Without a password, behaviour is unchanged (pending status + invite email). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>