U5 — the gate everything else has to pass

continuous_integration.yaml: six blocking checks, then a separate
publish per environment so a Vite build never gets tagged for the
wrong one, then a call into last commit's deploy workflow. Along the
way: the lint list had drifted (two problems not in the requirement,
one already fixed), and the Umami-origin gate needed a variable pair
of its own since the backend's side of that comparison lives on the
host, not in CI. Pinned the two vulnerable packages while at it.

frontend/src/components/users/InviteUserDialog.tsx

@@ -1,4 +1,4 @@
-import { useEffect, useState } from 'react';
+import { useState } from 'react';
 import { useForm } from 'react-hook-form';
 import { zodResolver } from '@hookform/resolvers/zod';
 import { toast } from 'sonner';
@@ -45,17 +45,6 @@ export function InviteUserDialog({ open, onOpenChange }: InviteUserDialogProps)
         },
     });
 
-    useEffect(() => {
-        if (!open) {
-            setStep(1);
-            setInviteLink(null);
-            setServerError(null);
-            inviteUser.reset();
-            reset();
-        }
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-    }, [open]);
-
     const {
         register,
         handleSubmit,
@@ -66,6 +55,17 @@ export function InviteUserDialog({ open, onOpenChange }: InviteUserDialogProps)
         resolver: zodResolver(inviteUserSchema),
     });
 
+    const handleOpenChange = (nextOpen: boolean) => {
+        if (!nextOpen) {
+            setStep(1);
+            setInviteLink(null);
+            setServerError(null);
+            inviteUser.reset();
+            reset();
+        }
+        onOpenChange(nextOpen);
+    };
+
     const onSubmit = handleSubmit(async (values) => {
         setServerError(null);
         try {
@@ -84,7 +84,7 @@ export function InviteUserDialog({ open, onOpenChange }: InviteUserDialogProps)
     };
 
     return (
-        <Dialog open={open} onOpenChange={onOpenChange}>
+        <Dialog open={open} onOpenChange={handleOpenChange}>
             <DialogContent className="sm:max-w-md">
                 <DialogHeader>
                     <DialogTitle>