Move towards current_actor or authorizable instead of passing user as god object

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

What

Consider using an actor modal or passing authorizable objects instead of needing to pass a user whenever we want to check permissions

Why

• The User object does too much and is required in too many places
• For restricted personal access tokens we needed to set an instance variable on user to change it's behaviour when we'd ideally have been passing around a non-user authorizable/actor
• Avoid needing to pass skip_authorization?