Agents & ticket permissions

Agents can no longer create HD Agent records or delete tickets; agent role grants now go through User Invitation only.