refactor(auth): remove project-local user API

tests/api/test_openapi_contract.py

@@ -77,6 +77,20 @@ def test_handler_router_defines_only_the_public_rest_operations() -> None:
     assert ("GET", "/getpipeproperties/") not in source_operations
 
 
+def test_legacy_project_user_operations_are_not_exposed() -> None:
+    source_paths = {
+        route.path
+        for route in source_api_router.routes
+        if isinstance(route, APIRoute)
+    }
+
+    assert {
+        "/network-schemas/user",
+        "/users",
+        "/users/detail",
+    }.isdisjoint(source_paths)
+
+
 def test_rest_openapi_satisfies_contract_invariants() -> None:
     from fastapi import FastAPI