Aug 17 - Update customer roles management

app/templates/auth/user_form.html

@@ -79,19 +79,10 @@
                         </div>
                     </div>
 
-                    {# phase51 — an External Inspector is invited by email and chooses
-                       their own username and password, so the admin never sets one.
-                       The JS at the foot of this page swaps these two blocks when the
-                       role changes; the server decides independently of the JS. #}
-                    <div id="inviteNotice" class="alert alert-info d-none">
-                        <i class="bi bi-envelope me-1"></i>
-                        <strong>This account will be invited by email.</strong>
-                        External inspectors work outside the business, so we do not set
-                        a password for them. On save, an invitation is sent to the email
-                        address above with a link to choose their own username and
-                        password. The link is valid for 72 hours.
-                    </div>
-
+                    {# phase51 — the email-invitation branch that used to live here
+                       moved to Customer Management along with the Customer
+                       Inspector role. Every role this form still offers is our own
+                       staff, created with an admin-set password. #}
                     <div class="row" id="passwordFields">
                         <div class="col-md-6 mb-3">
                             {{ form.password.label(class="form-label") }}
@@ -141,26 +132,4 @@
     </div>
 </div>
 
-<script>
-(function () {
-  'use strict';
-  var roleSel  = document.getElementById('role');
-  var pwBlock  = document.getElementById('passwordFields');
-  var notice   = document.getElementById('inviteNotice');
-  if (!roleSel || !pwBlock || !notice) return;   // director view has no role select
-
-  function sync() {
-    var invited = roleSel.value === 'external_inspector';
-    pwBlock.classList.toggle('d-none', invited);
-    notice.classList.toggle('d-none', !invited);
-    // Clear anything already typed so an invited account can never be created
-    // with an admin-chosen password sitting in the POST body.
-    if (invited) {
-      pwBlock.querySelectorAll('input').forEach(function (i) { i.value = ''; });
-    }
-  }
-  roleSel.addEventListener('change', sync);
-  sync();
-})();
-</script>
 {% endblock %}