- role-service had if (!userIds && userIds.length === 0) which crashes
with TypeError when userIds is null — changed && to ||
- oauth-service was setting silenced based on the already-inverted
active value instead of the original silenced field from the API
- email-service was awaiting three queries individually then passing
the resolved values to Promise.all, making them run sequentially
instead of in parallel