Resolve a single user within the caller's company by id, email or name.
Returns the user's profile fields.

Pass the user's BSON ObjectId, email, or full display name as
identifier. When the name matches multiple people, a disambiguation
payload is returned listing candidates — re-call with one of the
candidate ids to get a definitive result.

Required OAuth scope: user:read