feat: add Role (owner|admin) to the user domain, persistence model and mapper

test/invitations_qa_test.go

@@ -99,13 +99,13 @@ func TestInvitationsQaList(t *testing.T) {
 		}
 	})
 
-	t.Run("The list never carries secrets or user emails", func(t *testing.T) {
+	t.Run("The list never carries secrets", func(t *testing.T) {
 		f := newInviteFixture(t, 100)
 		f.invites.seed(pendingInvite("sam@renew.example"))
 
 		body := f.list(t).Body.String()
 
-		for _, forbidden := range []string{"\"code\"", "hashed_code", "verification_code", "password", "marta@renew.example"} {
+		for _, forbidden := range []string{"\"code\"", "hashed_code", "verification_code", "password"} {
 			if strings.Contains(body, forbidden) {
 				t.Errorf("list leaks %q", forbidden)
 			}