every proxied request carries who is asking

Officer's session is the only place the acting user is known, and fofos writes it
into its own change history. An email in X-Actor, because that database has no
users to point at.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

api/router.ts

@@ -762,6 +762,9 @@ router.all('/*', async (ctx) => {
       search: url.search,
       body,
       contentType: body ? 'application/json' : null,
+      // Officer's session is the only place the acting user is known. fofos writes it into its own
+      // history — see its record.ts, and the note on `actor` in fofos-client.
+      actor: ctx.get('user')?.email ?? null,
     });
     return passThrough(response);
   } catch (error) {