Current user for the client. Sourced from the UserRepository so observers see identity updates (e.g. the server-issued guest user) without a local mirror.