[comp] Production Deploy

[github-actions]

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
app (staging)	Skipped		Feb 27, 2026 4:51pm
portal (staging)	Skipped		Feb 27, 2026 4:51pm

[cursor]

PR Summary

Medium Risk
Changes who is recorded as the actor for task mutations under API-key auth, which can impact audit logs and permission expectations. Also introduces a new DB lookup and new 400 error path when no active owner exists.

Overview
Task mutation endpoints (PATCH /tasks/bulk, PATCH /tasks/bulk/assignee, PATCH /tasks/:taskId) now support API-key authentication by resolving a fallback userId when authContext.userId is missing.

Adds TasksService.getApiKeyActorUserId() to select the earliest-created active, non-deactivated org owner and attribute task updates to that user, returning a 400 if no eligible owner is found.

^{Written by Cursor Bugbot for commit 37b5ee7. This will update automatically on new commits. Configure here.}

[claudfuen]

🎉 This PR is included in version 1.86.1 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀