feat: add access module boundary migrations

src/govoplan_access/backend/api/v1/admin_common.py

@@ -25,6 +25,7 @@ from govoplan_access.backend.security.sessions import (
     collect_user_groups,
     collect_user_scopes,
 )
+from govoplan_access.backend.semantic import collect_function_assignment_ids, collect_function_delegation_ids
 from govoplan_access.backend.auth.dependencies import ApiPrincipal, has_scope
 from govoplan_access.backend.db.models import (
     Account,
@@ -44,7 +45,7 @@ def _http_admin_error(exc: Exception) -> HTTPException:
     if isinstance(exc, AdminConflictError):
         return HTTPException(status_code=status.HTTP_409_CONFLICT, detail=str(exc))
     if isinstance(exc, AdminValidationError):
-        return HTTPException(status_code=status.HTTP_422_UNPROCESSABLE_ENTITY, detail=str(exc))
+        return HTTPException(status_code=status.HTTP_422_UNPROCESSABLE_CONTENT, detail=str(exc))
     return HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc))
 
 
@@ -150,6 +151,8 @@ def _user_item(session: Session, user: User, *, owner_ids: set[str] | None = Non
         last_login_at=account.last_login_at,
         groups=[_group_summary(session, group, include_members=False) for group in groups],
         roles=[_role_summary(session, role) for role in roles],
+        function_assignment_ids=collect_function_assignment_ids(session, user),
+        function_delegation_ids=collect_function_delegation_ids(session, user),
         effective_scopes=collect_user_scopes(session, user, include_system=False),
         is_owner=user.id in effective_owner_ids,
         is_last_active_owner=user.id in effective_owner_ids and len(effective_owner_ids) == 1,