Corporate provisioning: outstanding fixes

**Area:** Coach Pulse Admin — User Management / corporate provisioning **What this covers:** the open corporate provisioning defects and change items carried forward from the Aug 17–21 QA passes. **Open app defects from the Aug 17 test:** 1. Corporate rows default to "Sales Associate" job title — remove the default, collect no job title 2. Role/privilege not editable after creation — edit should route through the same role picker as create, with an audit entry 3. Re-adding an existing email dead-ends on "already exists" — add flow should offer in-place reactivate/link 4. Store "Add user" affordance shows in the corporate context and should be hidden **Open role/scope items:** - Market SuperAdmin containment still fails on the admin console read path (reaches content outside its market) — retested on both EU and North America - Read-Only still presents actionable controls (Today, Rewards, image upload). Requirement is zero clickable actions in the admin console, server-side refusal, Knowledge Base unreachable by direct URL - Consumer Access requires a region selection; it should require MARKET (NA / EU / Global). Existing region-only accounts to be backfilled by script **Reference:** CoachPulse_CorporateProvisioning_QA_Findings_v1.docx, CoachPulse_RoleValidation_QA_Findings_v6.docx, CoachPulse_AdminAccessControl_QA_Findings_v1.docx, CoachPulse_ContentRoleConsolidation_ChangeRequest_v7.docx