CollectorInvite.patientUsername: read from accessInfo (topology-agnostic)

The previous getter parsed `apiEndpoint` URL path for the username, which
only works on dnsLess=true platforms (path-based). On dnsLess=false hosts
(`{username}.host/`), the path is empty and the getter returned null —
breaking any caller relying on it (notably doctor-dashboard EmbedInvite,
which fell through to a "Only pendings can be shared" error when the
patient was on a dnsLess=false platform).

New behaviour:
- patientUsername returns `accessInfo.user.username` once accessInfo is
  loaded; throws HDSLibError if checkAndGetAccessInfo() has not been
  awaited first; still returns null when status !== 'active'.
- AppManagingAccount.getContacts() now batches Promise.allSettled of
  checkAndGetAccessInfo() across active invites before calling
  toContactSource() so the cache is warm.

Cost: +1 /access-info round-trip per active invite the consumer needs a
username for. Acceptable tradeoff vs. silently broken DNS-less.

Author: perki

ts/appTemplates/AppManagingAccount.ts

@@ -97,6 +97,12 @@ export class AppManagingAccount extends Application {
     for (const result of results) {
       if (result.status === 'fulfilled') {
         const { collector, invites } = result.value;
+        // Active invites need accessInfo loaded before patientUsername / toContactSource can be read.
+        await Promise.allSettled(
+          invites
+            .filter((inv: any) => inv.status === 'active')
+            .map((inv: any) => inv.checkAndGetAccessInfo())
+        );
         for (const invite of invites) {
           sources.push(invite.toContactSource());
           allInvitePairs.push({ collector, invite });

ts/appTemplates/CollectorInvite.ts

@@ -188,19 +188,18 @@ export class CollectorInvite {
     return this.eventData.content.name;
   }
 
-  /** Extract patient username from apiEndpoint (only available for active invites) */
+  /**
+   * Patient username — read from `accessInfo.user.username`.
+   * Topology-agnostic (works for both `dnsLess=true` and `dnsLess=false`).
+   * Requires `checkAndGetAccessInfo()` to have been awaited first; throws otherwise.
+   * Returns `null` when the invite is not `active`.
+   */
   get patientUsername (): string | null {
     if (this.status !== 'active') return null;
-    try {
-      const endpoint = this.eventData.content.apiEndpoint;
-      if (!endpoint) return null;
-      // apiEndpoint format: https://token@host/username/
-      const url = new URL(endpoint.replace(/\/\/[^@]+@/, '//'));
-      const path = url.pathname.replace(/^\/|\/$/g, '');
-      return path || null;
-    } catch {
-      return null;
+    if (this.#accessInfo == null) {
+      throw new HDSLibError('patientUsername requires checkAndGetAccessInfo() to be called first');
     }
+    return this.#accessInfo.user?.username ?? null;
   }
 
   /** Convert to ContactSource for Contact grouping (doctor side) */