[comp] Production Deploy

[github-actions]

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app (staging)	Building		Mar 23, 2026 2:39pm
comp-framework-editor	Ready	Preview, Comment	Mar 23, 2026 2:39pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
portal (staging)	Skipped		Mar 23, 2026 2:39pm

[cursor]

PR Summary

Medium Risk
Changes which Google Workspace users are included in the 2FA and employee access checks by centralizing OU/email/suspension filtering; misconfiguration or logic regressions could alter check coverage and results.

Overview
Centralizes Google Workspace check user filtering into a new check-user-filter.ts, aligning 2FA and employee-access checks with employee sync rules (OU scoping, include/exclude email terms, and suspended/archived handling).

Updates employee-access to support target_org_units filtering and removes duplicated filtering logic from both checks, adding unit tests to lock in parsing and inclusion behavior.

^{Written by Cursor Bugbot for commit 3266427. This will update automatically on new commits. Configure here.}