Domain verification

Proves the workspace owns an email domain: the TXT record to publish, copied in one press, and a check that runs on its own until the record is seen. Once verified it offers to let anyone with an address on it join without an invitation. Turns away shared mail services, and SSO depends on it.