d737a251b2
Procedures were re-fetching the acting user from DB using the session email, which breaks if email changes between session creation and request. ctx.dbUser is populated by protectedProcedure and is always current. Also removed the now-unused findVacationActor helper function. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>