HYBRID ACCESS RECEIVER 5.1.0-0921-02 — STAFF PROVISIONING QA

- Preserves HMAC verification, five-minute timestamp validation and one-use nonce protection.
- Preserves the authorized active CRM-administrator gate.
- Staff directory now returns active/inactive staff plus existing CRM roles.
- Supports assigning an existing non-admin staff member to an existing CRM role.
- Supports provisioning a new non-admin staff account with an existing CRM role.
- Duplicate staff emails, missing roles, inactive staff and administrator role changes are rejected.
- Requests the native CRM welcome/password workflow for newly provisioned staff.
- No client, contact, lead, invoice, payment or business-operation write endpoint was added.
