Issue #3394774: Fix circular reference by replacing current_user decoration...

Issue #3394774: Fix circular reference by replacing current_user decoration with a role restriction subscriber

Decorating current_user attached the role firewall and entity_type.manager beneath a low-level service that the logger builds early, producing a circular reference. Remove the decorator and strip IP-restricted roles in a kernel.request subscriber that wraps the current account instead, leaving the service graph untouched.

(cherry picked from commit 399bb32665d1b213f4f7ff606522be71aee3c392)

Closes #3394774