Move email verification and team invitation into x-auth.shell with shared guidance/alert patterns. Truncate long team names in the mobile header switcher so actions stay visible. Cover both with markup tests.
