Workspaces and roles, refreshed.

Eight roles based on craft. Invitations through Rook ID. SSO ready.