Per review on PR #65: the previous comment "Override actor from
auth context to prevent spoofing" described only half the story now
that actor resolution has two precedence rules. Reworded to:

- Name the thing being overwritten (any Actor the client put in
  the command payload on the wire)
- Name the source of truth (context user id preferred, otherwise
  request.Actor from the adapter's ActorExtractor)
- Keep the spoofing-prevention rationale front and center — the
  whole point is that an actor field coming from the wire must
  never be trusted.

Template-only change. Generated example handlers refreshed.