Account routes: /accounts/{username} public profile; drop company_name

[martsokha]

Summary

Resolves the account-route inconsistency (PATCH /account/ vs GET /u/{username}/ used two different nouns for one resource) and removes the unused company_name field.

Account vocabulary

Researched GitHub's model (cited): it keeps two shapes — an identifier-less self route (/user, resolved from the token, richer representation) and a named-other route (/users/{login}, public representation) — and never mutates a user via /users/{name}. The two shapes are intentional; only the noun should be unified.

• Rename /u/{username}/ → /accounts/{username}/, so the account resource uses one noun: /account/ (self) + /accounts/{username}/ (others). No more /u/ shorthand.
• Cross-account lookups now return a trimmed PublicAccount (username, display name, created_at) instead of the full account — email and account flags (isAdmin/isSuspended/isActivated) are available only through the caller's own /account/ view. This matches GitHub's public-vs-self representation split.
• Access is still gated by a shared workspace, returning 404 (not 403) when none is shared, so the endpoint can't be used to enumerate handles.

Remove company_name

Deleted the field end to end: accounts column + length constraint + comment, schema.rs, Account/NewAccount/UpdateAccount models and the has_company helper, the CompanyNameLengthMax constraint enum arm and its error mapping, the create/update normalization, and the request/response DTOs.

Verification

• Full gate green: check / clippy -D warnings / nightly fmt / rustdoc -D warnings / test (13 suites). Migrations reset+reapplied; schema.rs regenerated.
• Live E2E: /account/ returns the full self view (with email, no company); /accounts/{username}/ returns the trimmed public view (no email/company/flags); old /u/{username}/ → 404; peer with no shared workspace → 404; unknown handle → 404. OpenAPI spec confirmed: 0 companyName, /accounts/{username}/ present, /u/{username}/ gone.

🤖 Generated with Claude Code