Members can invoice their own time

Until now only a workspace manager could raise an invoice, which left contractors either chasing someone else or going outside the tool entirely. A member can now bill their own hours — and only their own. The restriction is applied server-side when the entries are read, not trusted from the client, so it cannot be talked around.