Returns the caller's profile.

Real callers: the Neotimo desktop agent on startup, partner integrations via API key checking which identity they hold, and CI scripts asserting the token they baked into a pipeline. Cheap on the server — built from the request claims, no DB hit.