Guest Accounts

Basically, it would be nice to separate internals and externals in the user management, so one can easily get an overview and triage existing users and their permissions. Furthermore, a Guest role would be great for tools like zulip - currently we have to create the Zulip account separately so invitees do not get more access than intended: https://github.com/zulip/zulip/issues/29637

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information