feat: allow inviting to scope via user id

[crowlKats]

No description provided.

[lucacasonato]

You can use this to get users by email address, which seems bad.

I think the intended feature here was not "invite users that are already on jsr by email", but "invite users not already on jsr, by email". That feature would also need some changes to how invites work.

[crowlKats]

no, my intention here was for existing users (which could be expanded to non-existing ones i guess). right now its a pain to invite people: given an email, I have to go search & find their github user name, which sometimes takes more time than it should. also inviting by user ID should also be allowed.

[lucacasonato]

Well we definitely can't do this. Users that do not have their email set to public on GitHub, now effectively get their email publicized by us - that is not acceptable.

[crowlKats]

not sure I understand. you would need to have the user's email in the first place to invite them, not the other way around

[lucacasonato]

If you have an email (or you generated many emails), you can check if it's correct or not by submitting it to this API. Because there is no rate limiting, you can do that many times a second (brute forcing the email).