Function resolve_identity 

pub(crate) fn resolve_identity(
    ws: &Workspace,
    caller: &SessionSlot,
) -> Option<(String, Option<String>, bool)>

Resolve a caller to (project_name, team_role, durable). team_role is the worker’s role label (None targets the lead); durable is true for the lead or a worker with a persisted row in the session store, false for a worker without one.