[FIX] BigSim: sector enum (digital_infra/water), VAT skip, rate-limit clear fix (md5 filenames)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

application/controllers/InviteController.php

@@ -446,7 +446,7 @@ class InviteController extends BaseController
 
         // ── fallback: JWT super_admin ────────────────────────────────────
         $this->requireAuth();
-        $this->requireRole(['super_admin']);
+        $this->requireSuperAdmin();
     }
 
     // ── helper ───────────────────────────────────────────────────────────

application/controllers/OnboardingController.php

@@ -7,6 +7,7 @@
 
 require_once __DIR__ . '/BaseController.php';
 require_once __DIR__ . '/../services/VisuraService.php';
+require_once APP_PATH . '/services/RateLimitService.php';
 
 class OnboardingController extends BaseController
 {

simulate-nis2-b2b.php

@@ -213,7 +213,7 @@ if (!empty($listRes['data']['invites'])) {
 }
 
 info('Creazione invito B2B piano Professional 12 mesi...');
-$res = api('POST', '/invites', [
+$res = api('POST', '/invites/create', [
     'plan' => 'professional', 'duration_months' => 12, 'invite_expires_days' => 30,
     'max_uses' => 1, 'label' => 'TechStart - Sim B2B', 'channel' => 'sim-b2b',
     'notes' => 'Invito simulazione B2B — auto-generato',