GET /api/auth/me

GetCurrentUser returns the authenticated user, similar to OIDC's /userinfo endpoint. When the caller is not signed in or the account is no longer active, clears the refresh token cookie and returns UNAUTHENTICATED.