Logic to enforce visibility mode when inviting a VC

[techsmyth]

Description

As a VC provider I only want invitations according to the settings I have chosen

Acceptance criteria

• [ ] If a VC is HIDDEN, then all invitations should fail
• [ ] if a VC is PRIVATE then only invitations from within the same account should succeed

Additional Context

Screen shots / UX designs / data that are relevant.

Areas that will be affected

To be added during the refinement