Security improvements for admins

Admins can now restrict team invitations to approved email domains, blocking any sign‑up attempts from unapproved addresses, and receive immediate email notifications whenever a data export is started, including who requested it and when.