856096a531
Automatic linking during OOBE login is a security risk - staff records should only be linked to auth users via explicit admin action using PATCH /api/staff/:id/link-user. Co-Authored-By: Paperclip <noreply@paperclip.ing>