Backend: refactor users into crud-vs-utils #34

crud: contains auth gates. e.g "listUsers", "setCurrentUserName"
utils: not auth gated. e.g "getCurrentUserOrNull()"
auth: things like requireCurrentUserIsLoggedIn(), useful for the crud part

Also add claude.md files explaining what goes where