Summary

• let platform superusers bypass the SAML org membership check so they can authenticate without a pending invitation
• update the org access unit test matrix to cover the new is_platform_superuser flag

Testing

• Not run (not requested)

Summary by cubic

Allow platform superusers (owner) to access SAML organizations without prior membership or a pending invite, unblocking owner login on new deployments.

• Bug Fixes

  • Add platform superuser bypass to the SAML org access check.
  • Extend the unit test matrix to cover the is_platform_superuser flag.

• Docs

  • Clarify owner/superadmin bootstrap via TRACECAT__AUTH_SUPERADMIN_EMAIL.
  • Document SAML access policy and auto-provision rules; update Docker Compose notes.

^{Written for commit 767662d. Summary will update on new commits.}