No UI to approve pending tenant joiners (or invite members): Pro daemon exposes ApproveAdmission/InitiateAdmission over gRPC, nothing calls them #3288

Once a tenant has the admission-enforcement switch (the 09-15 cloud fixes; all live tenants after the 09-29 catch-up), a new person who signs in to a tenant lands pending and sees nothing until an owner/admin approves them.

The Pro daemon already exposes the RPCs (nodespaced-pro/proto/nodespace_pro.proto: rpc InitiateAdmission, rpc ApproveAdmission), and the cloud side has approve_admission / initiate_admission. But nothing in core calls them: no desktop Settings surface, no CLI command (searched packages/desktop-app, packages/cli, packages/core on main). An owner currently has no supported way to approve a joiner or invite someone.

Scope

• Desktop (Pro, Labs-gated with Sync): list pending admissions for the current tenant with Approve (and decline if the RPC surface supports it), and an Invite-by-email flow via the cloud's POST /admission/resolve-invitee → InitiateAdmission.
• Visible only to owner/tenant_admin; everyone else sees nothing.
• Optionally a CLI equivalent (nodespace tenant admissions list|approve, nodespace tenant invite <email>).
• The pending user's own view should say they're waiting for approval (check what the daemon's wrong-account/pending UX from sync#370 already shows).

🤖 Generated with Claude Code