feat: Users API, ownership transfer and removal of the legacy role string

features/get_current_user.feature

@@ -1,4 +1,5 @@
 Feature: A logged-in user fetches their own public profile without triggering the verified-account gate
+  Superseded in part by roles_permissions_users_api: GET /v1/auth/me has no top-level role key; the role is access.role only. The public user has seven fields: id, username, email, is_verified, created_at, updated_at and display_name.
 
   As the maintainer of RenewCMS
   I want the SPA to ask "who is currently logged in" via a single endpoint that answers from the