get
https://api.qfp.quantnetwork.net/api/users/me
Resolves the caller by the sub claim and returns their profile with
their role name and the flat set of permission names that role grants.
No permission is required.
A caller whose status is not ACTIVE is answered 401 rather than 403,
so a client holding a still-valid token can sign the user out.