auth/magic-link wireframe alignment: scope fields + copy fixes

Decision

Close 12 gaps between the magic-link landing page implementation and the wireframe (auth/magic-link-accept.html) — extend FamilyMemberScope, add CA-invite scope toggles, fix ICAI display, polish FamilyInvite / VerifyEmail / LinkExpired / ConfirmEmailNewDevice copy.

Why

A wireframe audit found 12 gaps between the magic-link landing page implementation and the wireframe (auth/magic-link-accept.html). Resolved in this pass.

Impact

• FamilyMemberScope gained inbox_documents: boolean so family invite scope toggles match the 5-item wireframe. The shared schema, defaultMemberScope, and MagicLinkRouter requestedScope parsing were all updated.
• CA invite (CaInvite.tsx) now shows two optional scope toggles (Expense detail, Portfolio detail) rendered client-side. The acceptCaInvite callable does not yet accept a scope parameter — backend wiring tracked separately.
• ICAI membership number displays "Verified" instead of "—" when the Cloud Function does not return it (getCaInviteByToken does not yet return icai_membership_no). Backend update tracked separately.
• FamilyInvite: added household member preview row inside the purple card, new-user note below action buttons, and "Wrong inbox? Use a different email" link in the amber email banner.
• VerifyEmail: added "Click the link in the email." helper paragraph; support SLA corrected from "1 working day" to "7 working days" (canonical value added to .context/wiki/entities/*).
• LinkExpired: body copy changed from "invites are valid 7 days" to "links are valid 7 days"; invite-expired CTA changed from "Go to sign-in →" to "Go back to sign-in →".
• ConfirmEmailNewDevice: "resend it" wrapped in an anchor.
• Affects copy-strings, tier-pro-family (family scope), and the CA-invite surfaces under pillar-ca-portal.

Status

Superseded by 2026-06-27-remove-magic-link — the magic-link flow has been removed entirely.

Sources

• .context/wiki/decisions/* § "2026-06-24 — auth/magic-link wireframe alignment: scope fields + copy fixes"