Before you submit

• I searched existing issues and found no duplicate.

What problem does this feature solve?

Organization owners need a way to invite, remove, and change the roles of members through an API. Right now every change has to be made by hand. This requires that on a larger Organization, Owners remember to manage changes when they occur.

Describe the solution you'd like

Proposed Endpoints:
Each endpoint uses API_KEY auth and needs the same permission as the matching UI action:

list members and pending invites
invite a user with a role, revoke an invite, change a role, remove a member
The rules would be the same as in the UI: invitees still accept by email, the last Owner can't be removed, and every action is recorded in the org's event history.

Open questions
Should the key belong to an Owner's account, or to the organization itself?
Should team membership be included?

Additional context

No response