Invite codes

Closed-beta signup gate. Set INVITE_ONLY_SIGNUPS=true in the API env to require these codes at signup.