Overview
The caller’s own identity. This route has no {org} segment, so
ResolveTenantFilter is a pass-through here — the caller
is read entirely from the authenticated principal (via GetCurrentUserQuery for a
user/PAT, or directly from claims for a service token), never from
ResolvedOrgId.