Organizations settings access and people polish

Quality goals for Settings › Organizations, Access tabs, People and Infrastructure (was #8395, #8387, #8386, #8544). Skip anything already fixed. 1. Access lists: member names align with group names on phone (no empty spacer); "Via <group>" rows indented under their group; inherited Source fits one line ("From Operator"). 2. Pickers: a nameless user shows the email once; the sidebar footer shows a nameless user's email, not "No name set". 3. People: the editable Email field shows the whole value beside the list at 1280 px; a refused bulk verb explains itself on tap (not only in `title`). 4. Domains: the empty tab names how a domain gets added; the Domains tab and SSO › Domains read as distinct (named or linked); people-and-orgs reader page matches. 5. Infrastructure: org-editable range starts read as distinct from operator-set Ports; the read-only note's inset comes from a SectionCard constant. 6. Seed a person holding two grants (direct Org Owner + Org Admin via a group) for dev and e2e. Out of scope: role resolution and access semantics, who may add join domains, SSO behaviour, what settings do, plan gating. Done means: - Each item changed or declined with a one-line reason in the PR. - Web tests for changed states. - Screenshots at 390 px and 1440 px.

Shipped the Settings polish in PR #6488 (queued to the merge lane): Access lists aligned, nested and one-line; nameless user shown once in pickers, and by email in the sidebar; bulk refusals explain themselves on tap; Domains and SSO domains distinct, docs match; range starts marked org-set, note inset from SectionCard; two-grant seed person. People email item declined (already fixed). Quick gate and changed-area tests green; checked by eye at 390 and 1440 px. Follow-ups filed as draft #8598. Memory: none applied.