Fix 5.0.2

[idotta]

Note

Multi-tenant claim/validation alignment

• Middleware now reads tenant claim type from IdmtOptions and validates token against TenantInfo.Identifier (not Id)
• IdmtUserClaimsPrincipalFactory pulls tenant from store and writes the tenant claim as tenantInfo.Identifier
• CurrentUserService sources TenantId from tenant context and adds TenantIdentifier (claim or context fallback)
• RegisterUser resolves tenant once from context and uses it for creation/logging

Tests and utilities

• New IdmtUserClaimsPrincipalFactoryTests and expanded CurrentUserServiceTests covering tenant identifier, custom claim types, and is_active
• Updated API test factory to use IdmtMultiTenantStrategy.DefaultHeaderName
• Minor unit test modernizations (collection expressions)

^{Written by Cursor Bugbot for commit 3ad54e0. This will update automatically on new commits. Configure here.}