orgfront refresh token 관리 추가

backend/internal/handler/user_handler.go

@@ -3559,6 +3559,7 @@ func (h *UserHandler) mapIdentitySummary(ctx context.Context, identity service.K
 	}
 
 	summary.Tenant = tenantSummary
+	markBootstrapSuperAdminSummary(&summary)
 
 	return summary
 }
@@ -3587,7 +3588,7 @@ func (h *UserHandler) mapLocalUserSummary(ctx context.Context, user domain.User)
 		Grade:          tenantBoundGradeFromUser(user),
 		Position:       user.Position,
 		JobTitle:       user.JobTitle,
-		Metadata:       user.Metadata,
+		Metadata:       maps.Clone(user.Metadata),
 		Tenant:         user.Tenant,
 		CreatedAt:      formatTime(user.CreatedAt),
 		UpdatedAt:      formatTime(user.UpdatedAt),
@@ -3599,9 +3600,29 @@ func (h *UserHandler) mapLocalUserSummary(ctx context.Context, user domain.User)
 		}
 	}
 
+	markBootstrapSuperAdminSummary(&summary)
+
 	return summary
 }
 
+func markBootstrapSuperAdminSummary(summary *userSummary) {
+	if summary == nil || !isBootstrapSuperAdminEmail(summary.Email) {
+		return
+	}
+	if summary.Metadata == nil {
+		summary.Metadata = make(domain.JSONMap)
+	}
+	summary.Metadata["bootstrapSuperAdmin"] = true
+}
+
+func isBootstrapSuperAdminEmail(email string) bool {
+	adminEmail := strings.ToLower(strings.TrimSpace(os.Getenv("ADMIN_EMAIL")))
+	if adminEmail == "" {
+		return false
+	}
+	return strings.ToLower(strings.TrimSpace(email)) == adminEmail
+}
+
 func (h *UserHandler) normalizePhoneNumber(phone string) string {
 	return normalizePhoneNumber(phone)
 }