Manage collaborators and access links

Admin stays intentionally narrow in v1: collaborator records plus invitation and recovery token management only.