[PM-38101] Add Staged Provision API Fields

[sven-bitwarden]

🎟️ Tracking

PM-38101

📔 Objective

Closing in on the saga for Staged users, this PR opens up BWDC and SCIM to provide a new option: InviteUsersAfterProvisioning. When true, the system operates as it does today - provisioned users are invited. When false, users are no longer invited post-provisioning, they are instead added to the new Staged status, wherein they don't occupy seat counts, or really do much of anything in our system except become placeholders for be invited.

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

This PR adds an InviteUsersAfterProvisioning option to the SCIM connection config and the Public API import endpoint. When false (and the PM34423StagedStatus flag is enabled), provisioned users are created in the Staged status via CreateStagedOrganizationUsersCommand instead of being invited. The new branches are correctly feature-flagged, default to the existing invite behavior, preserve conflict/duplicate handling, and update the external-ID mapping so staged users still associate with imported groups. Unit and integration tests cover all four paths (flag on/off, invite on/off, missing config).

Code Review Details

No blocking findings.

Notes considered and dropped after validation:

• The SCIM staged-user conflict check compares ExternalId case-sensitively (PostUserCommand.cs:65), unlike the vNext invite path which uses OrdinalIgnoreCase. This intentionally mirrors the legacy InviteScimOrganizationUserAsync path it is based on, so it is consistent with existing behavior rather than a regression.
• test/Billing.IntegrationTest/packages.lock.json bumps internal project references (2026.6.0 → 2026.6.2) with no manifest change in the diff. These are internal Bitwarden project versions tracked with the repo version; this is routine lock-file regeneration, not a dependency concern.

[codecov]

Codecov Report

❌ Patch coverage is 82.35294% with 12 lines in your changes missing coverage. Please review.
✅ Project coverage is 61.35%. Comparing base (809f6b9) to head (5b94151).
⚠️ Report is 7 commits behind head on main.

Files with missing lines	Patch %	Lines
...itwarden_license/src/Scim/Users/PostUserCommand.cs	70.96%	4 Missing and 5 partials ⚠️
.../Import/ImportOrganizationUsersAndGroupsCommand.cs	90.90%	2 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #7927      +/-   ##
==========================================
- Coverage   65.85%   61.35%   -4.50%     
==========================================
  Files        2244     2244              
  Lines       98673    98743      +70     
  Branches     8912     8925      +13     
==========================================
- Hits        64978    60586    -4392     
- Misses      31462    36014    +4552     
+ Partials     2233     2143      -90     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[JaredScar]

Lint failing, re-requiest review when passing tests please @sven-bitwarden

[JaredScar]

Failing tests