fix: exclude vordr users from relation queries

[idoshamun]

Summary

• exclude vordr users from topCreatorsByTag and similarCreators at query time
• exclude vordr users from topMembersBySquad ranking and final user hydration
• add GraphQL regressions covering creator and squad relation queries

Testing

• NODE_ENV=test pnpm run db:migrate:reset
• NODE_ENV=test npx jest tests/cron/updateTagMaterializedViews.ts --testEnvironment=node --runInBand
• NODE_ENV=test npx jest tests/sources.ts --testEnvironment=node --runInBand

[pulumi]

🍹 The Update (preview) for dailydotdev/api/prod (at bb09f36) was successful.

✨ Neo Explanation

This is a standard new-version deployment rolling out an updated application image across all 7 services and 38 scheduled jobs, accompanied by database and ClickHouse migration jobs for the new release. A Kubernetes Secret is also being replaced due to changed configuration data for the new version.

Root Cause Analysis

A new version of the application has been built and is being deployed across the entire prod environment. Every workload is being updated from the previous build to a new one, including a Kubernetes Secret update that contains changed configuration data for the new version.

Dependency Chain

The new application image version cascades uniformly to all workloads:

• 7 Deployments (API, background worker, WebSocket, private, temporal, worker-job, personalized digest) are being rolled out to the new image via Kubernetes rolling updates.
• 38 CronJobs are updated to reference the new image, so all future scheduled runs will use the new version.
• 2 migration Jobs (DB and ClickHouse) from the previous release are deleted and replaced with new ones for the current release — these will run the database and ClickHouse schema migrations for the new version.
• 1 Kubernetes Secret is being replaced in-place due to changed secret data, likely reflecting updated credentials or environment config for the new release.

There is also a non-blocking warning about missing GCP credentials in the Pulumi runner environment, but it does not affect the Kubernetes resources being deployed.

Risk analysis

The Kubernetes Secret replacement (vpc-native-k8s-secret) is the only notable concern: it will be briefly deleted and recreated, which could cause pods that reference it mid-rollout to fail secret resolution. However, since deployments perform rolling updates, and the secret replacement is typically fast, the practical risk is low. No stateful resources (databases, storage) are being modified or deleted.

Resource Changes

    Name                                                   Type                           Operation
+   vpc-native-api-clickhouse-migration-cd1264fb           kubernetes:batch/v1:Job        create
+-  vpc-native-k8s-secret                                  kubernetes:core/v1:Secret      create-replacement
~   vpc-native-update-current-streak-cron                  kubernetes:batch/v1:CronJob    update
~   vpc-native-deployment                                  kubernetes:apps/v1:Deployment  update
~   vpc-native-sync-subscription-with-cio-cron             kubernetes:batch/v1:CronJob    update
~   vpc-native-squad-posts-analytics-refresh-cron          kubernetes:batch/v1:CronJob    update
~   vpc-native-generic-referral-reminder-cron              kubernetes:batch/v1:CronJob    update
-   vpc-native-api-db-migration-3fe08a0e                   kubernetes:batch/v1:Job        delete
~   vpc-native-update-trending-cron                        kubernetes:batch/v1:CronJob    update
~   vpc-native-private-deployment                          kubernetes:apps/v1:Deployment  update
~   vpc-native-post-analytics-history-day-clickhouse-cron  kubernetes:batch/v1:CronJob    update
~   vpc-native-ws-deployment                               kubernetes:apps/v1:Deployment  update
~   vpc-native-rotate-daily-quests-cron                    kubernetes:batch/v1:CronJob    update
-   vpc-native-api-clickhouse-migration-3fe08a0e           kubernetes:batch/v1:Job        delete
~   vpc-native-clean-channel-highlights-cron               kubernetes:batch/v1:CronJob    update
~   vpc-native-hourly-notification-cron                    kubernetes:batch/v1:CronJob    update
~   vpc-native-user-profile-updated-sync-cron              kubernetes:batch/v1:CronJob    update
~   vpc-native-daily-digest-cron                           kubernetes:batch/v1:CronJob    update
~   vpc-native-update-achievement-rarity-cron              kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-gifted-plus-cron                      kubernetes:batch/v1:CronJob    update
~   vpc-native-temporal-deployment                         kubernetes:apps/v1:Deployment  update
~   vpc-native-channel-digests-cron                        kubernetes:batch/v1:CronJob    update
~   vpc-native-bg-deployment                               kubernetes:apps/v1:Deployment  update
~   vpc-native-generate-search-invites-cron                kubernetes:batch/v1:CronJob    update
~   vpc-native-check-analytics-report-cron                 kubernetes:batch/v1:CronJob    update
~   vpc-native-update-views-cron                           kubernetes:batch/v1:CronJob    update
~   vpc-native-post-analytics-clickhouse-cron              kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-zombie-users-cron                     kubernetes:batch/v1:CronJob    update
~   vpc-native-personalized-digest-deployment              kubernetes:apps/v1:Deployment  update
~   vpc-native-clean-zombie-images-cron                    kubernetes:batch/v1:CronJob    update
~   vpc-native-worker-job-deployment                       kubernetes:apps/v1:Deployment  update
+   vpc-native-api-db-migration-cd1264fb                   kubernetes:batch/v1:Job        create
~   vpc-native-update-tags-str-cron                        kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-stale-user-transactions-cron          kubernetes:batch/v1:CronJob    update
~   vpc-native-update-tag-materialized-views-cron          kubernetes:batch/v1:CronJob    update
~   vpc-native-update-highlighted-views-cron               kubernetes:batch/v1:CronJob    update
~   vpc-native-validate-active-users-cron                  kubernetes:batch/v1:CronJob    update
~   vpc-native-rotate-weekly-quests-cron                   kubernetes:batch/v1:CronJob    update
~   vpc-native-user-posts-analytics-refresh-cron           kubernetes:batch/v1:CronJob    update
~   vpc-native-channel-highlights-cron                     kubernetes:batch/v1:CronJob    update
~   vpc-native-clean-zombie-opportunities-cron             kubernetes:batch/v1:CronJob    update
... and 10 other changes