fix(identity): qa mirror of #327 — fail-closed exact-match ALB resolution
- fix(identity): exact-match tiered ALB resolution — fail closed, no fabricated emails, no seed, no alias keys
- Merge pull request #330 from tpromni/fix/alb-identity-harden-qa-2026-07-26
Source: tpromni/coach-pulse-consumer-ui → qa