slapos_erp5: production users can create invitation token

slapos_erp5: do not allow creating Contract Invitation Token anymore

slapos_erp5: invitation token roles

slapos_erp5: trigger invitation token local role generation

slapos_erp5: is an Invitation Token a ticket?

slapos_erp5: test invitation token roles

slapos_erp5: roles for Assignment Request

`SuSE-release` was deprecated and missing in new distributions in favor of `os-release`.

See merge request nexedi/slapos.core!628

Previous messages were all showing relative URL of the object on which the script was executed.
This was likely a typo in the script and made messages unreadable. This commit restores proper behaviour.

   Probably it comes from a bad copy and paste, since it contains mostly payzen references.

   Create the documents on the fly on the tests, otherwise it may cause problems on production.

  We don't want mistakes when configure it.

  No reason to pre-configure test like this

All outdated items should have a validation_state to validated

See merge request nexedi/slapos.core!642

This customization is no longer needed and the customized script is now
different in ERP5

  For now, we dont display Consumption details on invoice

   Use getMovementList to get Invoice Cell/Invoice Lines, it allows to get the
    aggregate properly.

   It makes list more consistent.

   Pay Now don't contain the link to pay anymore, so the user
   might use global action to make the payments anyway.

   Return translated 'state' directly and update tests

   Organisation is usually linked as Source Section or Destination
   Section.

   The user don't have access to the Organisations so use Shadow User
   (via script) to get the required information for the printout.

   Bare minimal update to display details, and extend to support Compute Node/Project/Instance Tree Subscriptions.
   Don't display details if the lines don't aggregate subscription requests

   Use directly the Destination Section and display more information if it was one Organisation

Do not try to show results with customer account for now.

Like a Subscription Request, a Subscription Change Request is used to create a new Open Sale Order,
but, it also archive a previous one at the same time.

The purpose is to change some parameters of an Open Sale Order,
and correctly created compensation movement, to ensure the resource
stock is correct.

Stop using discount resource, and reduce the quantity of the consumed software product / service

Only Sale people can create Subscription Change Request.

TODO: check how quantity precision can be defined

The only use case supported for now is changing an Instance Tree's user.

   for Sale Invoice Transaction

   Limit the access from any SHADOW user to specific SHADOW user linked into the context, same as Payment Transaction and Payzen events.

   Roles (Assignee and Auditor) don't change, just become more restrictive to single shadow user.

  Deduplicate script to get shadow user from context, now it relies on base_category_list configured in the role, and output all needed roles (Assignee and Auditor), so the Role configuration can filter it properly.

  This change makes no change on output result for the configured roles.