docs: Update enrollment flow task output with accurate information

Updated the Ansible task output to reflect the actual behavior
after blueprint fix:

Changes:
- Removed misleading "Set as default enrollment flow in brand" feature
- Updated to "Invitation-only enrollment" (more accurate)
- Added note about brand enrollment flow API restriction
- Added clear instructions for creating and using invitation tokens
- Simplified verification steps

This provides operators with accurate expectations about what
the enrollment flow blueprint does and doesn't do.

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>

ansible/roles/authentik/tasks/invitation.yml

@@ -93,19 +93,20 @@
       Verification: {{ enrollment_flow_check.stdout | default('{}') }}
 
       Features:
-      - Public self-registration enabled
+      - Invitation-only enrollment (requires valid invitation token)
-      - Invitation token support
       - User prompts: username, name, email, password
       - Automatic user creation and login
-      - Set as default enrollment flow in brand
 
-      Note: Authentik applies blueprints asynchronously.
+      Note: Brand enrollment flow is NOT auto-configured (API restriction).
-      Changes should be visible within 1-2 minutes.
+      Flow is accessible via direct URL even without brand configuration.
 
-      To verify manually:
+      To use enrollment:
+      1. Create invitation: Directory > Invitations > Create Invitation
+      2. Share invitation link: https://{{ authentik_domain }}/if/flow/default-enrollment-flow/?itoken=TOKEN
+
+      To verify:
       - Login to https://{{ authentik_domain }}
       - Check Admin > Flows for "default-enrollment-flow"
-      - Check Admin > System > Brands > Flow enrollment
+      - Test enrollment URL: https://{{ authentik_domain }}/if/flow/default-enrollment-flow/
-      - Test enrollment at: https://{{ authentik_domain }}/if/flow/default-enrollment-flow/
       ========================================
   when: api_result.status is defined and api_result.status == 200