Merge remote-tracking branch 'origin/main' into atish/strip-media-metadata

* origin/main:
  feat: add invite QR and mobile direct join (#1957)
  feat: open add community from deep links (#1970)
  fix(desktop): enforce observer archive policy reconciliation on internal builds (#1923)
  feat(desktop): streamline nostr identity pairing (#1974)
  feat(desktop): ensure starter channels during onboarding (#1937)
  test(desktop): make omission-preservation test discriminate on instructions (#1988)
  fix(desktop): omission must not wipe team persona_ids/instructions (#1985)

# Conflicts:
#	Cargo.lock

.github/workflows/ci.yml

@@ -181,6 +181,10 @@ jobs:
         run: just desktop-tauri-test
         env:
           CMAKE_POLICY_VERSION_MINIMUM: "3.5"
+      - name: Desktop Tauri compiled-flag verification
+        run: just desktop-tauri-test-compiled-flags
+        env:
+          CMAKE_POLICY_VERSION_MINIMUM: "3.5"
       - name: Upload desktop e2e artifacts
         if: failure()
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
@@ -649,6 +653,11 @@ jobs:
           done
           cat /tmp/buzz-relay.log
           exit 1
+      - name: Invite claim security tests
+        run: |
+          cargo test --profile ci -p buzz-relay claim_ -- --ignored --nocapture
+        env:
+          DATABASE_URL: postgres://buzz:buzz_dev@localhost:5432/buzz
       - name: NIP-ER reminder e2e
         # Feature e2e for NIP-ER (Event Reminders, kind:30300): write-path
         # validation, author-only read filtering, and scheduler delivery against
@@ -695,7 +704,9 @@ jobs:
           chmod +x ./target/ci/buzz-relay ./target/ci/git-credential-nostr
           ./scripts/start-relay-for-tests.sh --no-build
       - name: Relay E2E tests
-        run: cargo test -p buzz-test-client --test e2e_persona --test e2e_nostr_interop -- --ignored --nocapture
+        run: |
+          cargo test -p buzz-test-client --test e2e_persona --test e2e_nostr_interop -- --ignored --nocapture
+          cargo test -p buzz-test-client --test e2e_relay invite -- --ignored --nocapture
         env:
           RELAY_URL: ws://localhost:3000
           GIT_CREDENTIAL_NOSTR_BIN: ${{ github.workspace }}/target/ci/git-credential-nostr