feat(pitch-deck): add pitch version selection to investor invite form

- Version dropdown on the invite form shows all committed versions
- Selected version is assigned to the investor at creation time (no separate step needed)
- API validates version is committed before upserting
- Leaving the dropdown empty keeps any existing assignment (COALESCE behavior)
- version_id included in audit log

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

pitch-deck/app/api/admin/invite/route.ts

@@ -11,7 +11,7 @@ export async function POST(request: NextRequest) {
   const adminId = guard.kind === 'admin' ? guard.admin.id : null
 
   const body = await request.json().catch(() => ({}))
-  const { email, name, company, greeting, message, closing, lang = 'de', send_email = true } = body
+  const { email, name, company, greeting, message, closing, lang = 'de', send_email = true, version_id } = body
 
   if (!email || typeof email !== 'string') {
     return NextResponse.json({ error: 'Email required' }, { status: 400 })
@@ -27,18 +27,34 @@ export async function POST(request: NextRequest) {
 
   const normalizedLang = lang === 'en' ? 'en' : 'de'
 
+  // Validate version if provided
+  const normalizedVersionId = version_id || null
+  if (normalizedVersionId) {
+    const ver = await pool.query(
+      `SELECT id, status FROM pitch_versions WHERE id = $1`,
+      [normalizedVersionId],
+    )
+    if (ver.rows.length === 0) {
+      return NextResponse.json({ error: 'Version not found' }, { status: 404 })
+    }
+    if (ver.rows[0].status !== 'committed') {
+      return NextResponse.json({ error: 'Can only assign committed versions' }, { status: 400 })
+    }
+  }
+
   // Upsert investor
   const { rows } = await pool.query(
-    `INSERT INTO pitch_investors (email, name, company, preferred_lang)
-     VALUES ($1, $2, $3, $4)
+    `INSERT INTO pitch_investors (email, name, company, preferred_lang, assigned_version_id)
+     VALUES ($1, $2, $3, $4, $5)
      ON CONFLICT (email) DO UPDATE SET
        name = COALESCE(EXCLUDED.name, pitch_investors.name),
        company = COALESCE(EXCLUDED.company, pitch_investors.company),
        preferred_lang = EXCLUDED.preferred_lang,
+       assigned_version_id = COALESCE(EXCLUDED.assigned_version_id, pitch_investors.assigned_version_id),
        status = CASE WHEN pitch_investors.status = 'revoked' THEN 'invited' ELSE pitch_investors.status END,
        updated_at = NOW()
      RETURNING id, status`,
-    [normalizedEmail, name || null, company || null, normalizedLang],
+    [normalizedEmail, name || null, company || null, normalizedLang, normalizedVersionId],
   )
 
   const investor = rows[0]
@@ -71,6 +87,7 @@ export async function POST(request: NextRequest) {
       expires_at: expiresAt.toISOString(),
       lang: normalizedLang,
       send_email: !!send_email,
+      version_id: normalizedVersionId,
     },
     request,
     investor.id,