Sub-ticket of MARS-154 CI/lint guard: flag raw-email ('email =' / lower(email) =) compares in auth + lookup paths; force normalizedEmail-column compares · mars