Name the login and sign-in address at onboarding handoff (USER-WP-0035-T01).

From the 2026-09-23 operator run: recipients try the email address, and the
admin user entry gave no sign-in address to pass on.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 58902@bnt-lap001
Assistant-Session: 7ac7f865-2dc5-4aa7-8eb7-27a342109c2f

tests/test_journey_roles.py

@@ -76,6 +76,15 @@ class UserJourneys(JourneyFixture):
         self.assertIn(b'Login name: <strong>actual.login</strong>',body)
         self.assertIn(b'may differ from the display name',body)
         self.assertEqual(1,len(self.app.service.store.identities_for_user(user.user_id)))
+        # 2026-09-23 operator run: the recipient must be told where to sign in,
+        # and that the email address is not the login name (USER-WP-0035-T01).
+        self.assertIn(self.app.login_url.encode(),body)
+        self.assertIn(b'not the email address',body)
+        response,listing=invoke(self.app,f'/admin/{TENANT}',cookie='ue_session=admin')
+        self.assertEqual('200 OK',response['status'])
+        self.assertIn(b'Sign-in page:',listing)
+        self.assertIn(self.app.login_url.encode(),listing)
+        self.assertIn(b'signing in by email does not work',listing)
 
 class TenantAdminJourneys(JourneyFixture):
     def test_wrong_role_or_tenant_never_calls_provider(self):