// GET /cms/auth/me — the current user + roles (401 if unauthenticated).
import "auth" as auth;
let g = auth::guard_user(ctx);
if !g.ok { return g.response; }
let u = g.user;
#{
    statusCode: 200,
    body: #{ id: u.id, email: u.email, display_name: u.display_name, roles: auth::roles_of(u) }
}