It turns out WordPress Social Login (linked above) does have a system where you can whitelist specific email addresses. So you don’t create their accounts ahead of time, but you add their emails to the whitelist and then you can let them know to self-register.

Good enough