feat: delete pending application invitations

[jaroslawlakomy-grav]

Issue

https://gravitee.atlassian.net/browse/APIM-14239

Description

Implements the first part of invitation mutations: deleting pending application invitations from the Developer Portal.
Changes:

• Adds DELETE /applications/{applicationId}/invitations/{invitationId},
• Adds DeleteApplicationInvitationUseCase and domain service for application-scoped deletion,
• Validates that the application exists in the current environment before deleting.
• Ensures the invitation exists and belongs to the requested application.
• Returns 404 when the application, invitation, or application/invitation relation is invalid.
• Extends invitation CRUD service with application invitation lookup by ID.

Out of scope

• Invitation role update.
• Resend invitation.
• Notification handling.

[gemini-code-assist]

Code Review

This pull request introduces the capability to delete application invitations by adding a new DELETE endpoint (/{invitationId}) to ApplicationInvitationsResource. This endpoint is supported by a new use case (DeleteApplicationInvitationUseCase) and domain service (DeleteApplicationInvitationDomainService) that validate the application's existence and ensure the invitation belongs to the specified application before deletion. The changes also include the necessary repository query methods in InvitationCrudService and its implementations, as well as comprehensive unit tests for the resource, use case, and domain service. There are no review comments to address, and the implementation is clean and well-tested, so I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[sonarqubecloud]

Quality Gate passed for 'Gravitee.io APIM - Reporter'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dev-marek]

What about passing InvitationId instead of String?