How does it limit to 1 invite?
Discussion
The one-time keypackage shared by the inviter is stored locally and marked there. Once an invitee uses it and sends a group creation request, it is marked as used. If another person tries to use it afterward, the request will be rejected.
More importantly, the one-time keypackage is only included in the link and is never sent to the relay.