// GET /cms/admin/users — list app-users + their roles (admin only).
import "auth" as auth;
let g = auth::guard(ctx, ["admin"]);
if !g.ok { return g.response; }

let res = users::list(#{ "$limit": 200 });
let out = [];
for u in res.users {
    out.push(#{
        id: u.id,
        email: u.email,
        display_name: u.display_name,
        roles: auth::roles_of(u),
        created_at: u.created_at,
    });
}
#{ statusCode: 200, body: #{ users: out } }