fix(housekeeping): harden people account workflows

src/actions/bulk-users.test.ts

@@ -10,13 +10,11 @@ import {
 
 const { execute } = vi.hoisted(() => ({ execute: vi.fn() }));
 vi.mock("@/features/housekeeping/domains/people/services/mutations", () => ({
-	createLegacyPeopleMutationContext: vi.fn(
-		(staff, permission, correlationId) => ({
-			staff,
-			permission,
-			correlationId,
-		}),
-	),
+	createPeopleMutationInvocation: vi.fn((staff, correlationId) => ({
+		expectedActorId: staff.id,
+		correlationId,
+		legacy: true,
+	})),
 	peopleMutationService: { execute },
 }));
 vi.mock("@/lib/admin/guard", () => ({ requirePermission: vi.fn() }));
@@ -88,7 +86,7 @@ describe("legacy bulk user wrappers", () => {
 			data: { userId: 9, untilUnix: 1234 },
 		});
 		expect(execute).toHaveBeenLastCalledWith(
-			expect.objectContaining({ permission: "admin.users.edit" }),
+			expect.objectContaining({ expectedActorId: 1 }),
 			"user.trade-lock",
 			{ userId: 9, untilUnix: 1234 },
 		);