Define a permissions model for external guests

Problem Agencies want to invite clients into a single project without exposing the rest of the workspace. Today the only options are full member or nothing.

Open questions

• Guest seat pricing: free, or counted against the plan?
• Can guests see other members' names and comments?
• Per-project or per-section scoping?

Not ready because: pricing decision pending.