feat(drive): complete updated_by created_by

tests/api/files-folders.hurl

@@ -19,9 +19,11 @@ Content-Type: application/json
 HTTP 200
 [Captures]
 token: jsonpath "$.access_token"
+admin_user_id: jsonpath "$.user.id"
 [Asserts]
 jsonpath "$.access_token" isString
 jsonpath "$.token_type" == "Bearer"
+jsonpath "$.user.id" isString
 
 
 # ─────────────────────────────────────────────────────────────
@@ -102,6 +104,9 @@ test1_id: jsonpath "$.id"
 jsonpath "$.id" isString
 jsonpath "$.name" == "test1"
 jsonpath "$.parent_id" == {{home_folder_id}}
+# D0 §14 provenance — self-creation: both fields stamp the caller.
+jsonpath "$.created_by" == "{{admin_user_id}}"
+jsonpath "$.updated_by" == "{{admin_user_id}}"
 
 
 # ─────────────────────────────────────────────────────────────
@@ -169,6 +174,9 @@ jsonpath "$.name" == "hello.txt"
 jsonpath "$.folder_id" == {{test2_id}}
 jsonpath "$.size" == 32
 jsonpath "$.mime_type" == "text/plain"
+# D0 §14 provenance — uploader's id stamps both fields on a fresh upload.
+jsonpath "$.created_by" == "{{admin_user_id}}"
+jsonpath "$.updated_by" == "{{admin_user_id}}"
 
 
 # ─────────────────────────────────────────────────────────────