fix: correct relative import depth for get_user_id (3 dots not 4)

feat: full per-user data isolation via X-User-ID header

fix: use checkfirst=True in create_all to avoid duplicate table error on restart

initial commit