Revoke a pending invite and remove the invited-shell user.
Only valid while user.status == 'invited' — once the user has
accepted (status=‘active’ or ‘suspended’) they have a real
identity and the right operator action is DELETE /users/{id},
which preserves the row for audit. Revoke-invite, in contrast,
hard-deletes the user (no audit row would be useful to keep
since the user never existed beyond the invite shell). The
USER_INVITE_REVOKED audit event captures the decision; the row
itself is gone so the same email can be re-invited cleanly later.