Retrieve the authenticated user using an Authorization: Bearer API key or access token, or the authentication cookie. A supplied Bearer token takes precedence over the cookie. The response includes the user profile, global roles, and accessible tenants with tenant-specific roles, feature flags, and settings.