List users across all companies (admin only, delegated path)

Paginated, filterable, sortable list of users. One row per user, enriched with primaryCompanyName. Pass filter: {"companyId": "..."} to scope to one company — that also joins user_companies and populates that membership's companyName/isPrimary/roleKeys per row. role is accepted as a filter/sort key but is not a returned column.