Pass request headers into auth session resolution

[elie222]

User description

Summary

• pass route request headers into auth session resolution instead of relying on ambient headers
• update mobile-sensitive API and linking routes to resolve sessions from the incoming request
• align middleware auth checks with the same request-header based session handling

Testing

• cd apps/web && pnpm exec vitest run 'app/api/user/me/route.test.ts' 'utils/webhook/validate-webhook-account.test.ts'

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:
Update session resolution to pass incoming headers into the auth helper so downstream components derive user context from the specific request instead of ambient state. Ensure linking callbacks, user lifecycle endpoints, and middleware gates call auth(request.headers) so every flow checks authorization based on the request at hand.

Latest Contributors(2)

User	Commit	Date
elie222	oauth: dedupe account ...	April 01, 2026
josh@jshwrnr.com	Backend fixes for mobi...	March 09, 2026

This pull request is reviewed by Baz. Review like a pro on (Baz).

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
inbox-zero	Ignored		Apr 10, 2026 7:50am

[cubic-dev-ai]

No issues found across 6 files