fix: query users from production connection in UserController only

Remove the broad getConnectionName() overrides from User, Company, and
CompanyUser models — those would break sandbox relations system-wide.

Instead, override queryRecord() in UserController to temporarily restore
the production connection for the duration of the user list query only,
then restore the sandbox connection immediately after. This is surgical:
only the IAM /users list hits production; all other sandbox queries
(orders, drivers, etc.) continue to use the sandbox connection normally.

Author: Ronald A Richardson

src/Http/Controllers/Internal/v1/UserController.php

@@ -68,6 +68,40 @@ class UserController extends FleetbaseController
      */
     public $updateRequest = UpdateUserRequest::class;
 
+    /**
+     * Query users always against the production database.
+     *
+     * Users are authoritative in production. The sandbox database contains
+     * only a mirrored copy. Temporarily restoring the production connection
+     * for this query ensures the IAM list is correct regardless of whether
+     * the console is in sandbox mode, without affecting any other sandbox
+     * queries in the same request lifecycle.
+     *
+     * @return \Illuminate\Http\Response
+     */
+    public function queryRecord(Request $request)
+    {
+        $isSandbox = config('fleetbase.connection.db') === 'sandbox';
+
+        if ($isSandbox) {
+            config([
+                'database.default'        => env('DB_CONNECTION', 'mysql'),
+                'fleetbase.connection.db' => env('DB_CONNECTION', 'mysql'),
+            ]);
+        }
+
+        $response = parent::queryRecord($request);
+
+        if ($isSandbox) {
+            config([
+                'database.default'        => 'sandbox',
+                'fleetbase.connection.db' => 'sandbox',
+            ]);
+        }
+
+        return $response;
+    }
+
     /**
      * Creates a record with request payload.
      *

src/Models/Company.php

@@ -42,16 +42,6 @@ class Company extends Model
      */
     protected $connection = 'mysql';
 
-    /**
-     * Always use the production database connection.
-     *
-     * @return string
-     */
-    public function getConnectionName(): string
-    {
-        return env('DB_CONNECTION', 'mysql');
-    }
-
     /**
      * The database table used by the model.
      *

src/Models/CompanyUser.php

@@ -23,16 +23,6 @@ class CompanyUser extends Model
      */
     protected $table = 'company_users';
 
-    /**
-     * Always use the production database connection.
-     *
-     * @return string
-     */
-    public function getConnectionName(): string
-    {
-        return env('DB_CONNECTION', 'mysql');
-    }
-
     /**
      * The attributes that are mass assignable.
      *

src/Models/User.php

@@ -74,20 +74,6 @@ class User extends Authenticatable
      */
     protected $connection = 'mysql';
 
-    /**
-     * Always use the production database connection.
-     *
-     * User records are authoritative in production and are only mirrored
-     * (read-only) to sandbox via sandbox:sync. Reads and writes must always
-     * target production regardless of whether sandbox mode is active.
-     *
-     * @return string
-     */
-    public function getConnectionName(): string
-    {
-        return env('DB_CONNECTION', 'mysql');
-    }
-
     /**
      * Override the default primary key.
      *