Feat v0.6.15 user display audit (#50)

Co-authored-by: Jeffrey Smith <jasafpro@gmail.com>
Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>

server/store/postgres/user.go

@@ -250,6 +250,47 @@ func (s *UserStore) SearchActive(ctx context.Context, excludeUserID, query strin
 	return results, rows.Err()
 }
 
+// ResolveByIDs returns lightweight identity records for the given user IDs.
+func (s *UserStore) ResolveByIDs(ctx context.Context, ids []string) ([]store.UserSearchResult, error) {
+	if len(ids) == 0 {
+		return []store.UserSearchResult{}, nil
+	}
+	if len(ids) > 100 {
+		ids = ids[:100]
+	}
+
+	// Build $1,$2,... placeholders
+	placeholders := make([]string, len(ids))
+	args := make([]interface{}, len(ids))
+	for i, id := range ids {
+		placeholders[i] = fmt.Sprintf("$%d", i+1)
+		args[i] = id
+	}
+
+	q := `SELECT id, username, COALESCE(display_name, '') AS display_name,
+	             COALESCE(handle, '') AS handle, COALESCE(avatar_url, '') AS avatar_url
+	      FROM users WHERE id IN (` + strings.Join(placeholders, ",") + `)`
+
+	rows, err := DB.QueryContext(ctx, q, args...)
+	if err != nil {
+		return nil, err
+	}
+	defer rows.Close()
+
+	var results []store.UserSearchResult
+	for rows.Next() {
+		var u store.UserSearchResult
+		if err := rows.Scan(&u.ID, &u.Username, &u.DisplayName, &u.Handle, &u.AvatarURL); err != nil {
+			continue
+		}
+		results = append(results, u)
+	}
+	if results == nil {
+		results = []store.UserSearchResult{}
+	}
+	return results, rows.Err()
+}
+
 // ── CS2 additions ─────────────────────────────────────────────
 
 func (s *UserStore) MergeSettings(ctx context.Context, userID string, patch []byte) error {