The login's row, created for it; returns the existing one on a race.
timeZone is the browser's, unvalidated: stored when it is a valid zone.
Whether the address has a PENDING invite to any workspace.
Whether a dashboard user row holds the address, unlinked or linked to a login other than sub.
What admitting a Cognito invitee needs of a dashboard's user, invite and membership services.