Get Client Users From Id Token

Return paginated users for the caller's client, authenticated via Okta ID token.

Accepts the Okta ID token in the Authorization Bearer header, allowing integrations such as OpenBB workspace widgets to retrieve team members without requiring a regular API key / Bearer token.

Note: require_permissions cannot be used here as a route dependency because it internally calls get_user_from_token (regular JWT Bearer), which rejects Okta ID tokens. The same permission gate is applied inline instead.