bmersereau pulls user identities out of the edit logs

During development, the edit-resolution path was writing out who did what: user, document, and edit identifiers, all at routine INFO level. In production that becomes a durable record inside any logging system that a named person touched a named legal document. bmersereau frames it plainly as a data-minimization problem under GDPR, the EU privacy rule, and strips those lines out. Genuine error logging elsewhere is left untouched, so the fork still reports real failures.

Pulling the logging surfaced a latent bug that got fixed in the same pass: two document-edit database writes had been silently swallowing their errors, so a failed update could pass unnoticed. Those now report failure properly. A couple of build and test cleanups ride along, including repairing a guard test that was checking the wrong thing and therefore passing against nothing.