feat(invitations): bind profile limits and guard v2 creation - #2089

Required because it changes web/src/**. Attach screenshots, a recording, or results under the description's Evidence heading, or publish them at https://evidence.siloserver.org/pr/silo-server/2089/ or with npx @silo-server/evidence publish <folder> --pr 2089, where only the author and Silo maintainers can open them.