agent foundation

lib/Service/User/UserLifecycleService.php

@@ -34,6 +34,7 @@ class UserLifecycleService
             $deleteDays = 0;
         }
 
+        // Exclude admins with settings/tenant management rights — they must be deactivated manually.
         $privilegedUserIds = $this->userReadRepository->listPrivilegedUserIdsByPermissionKeys([
             PermissionService::SETTINGS_UPDATE,
             PermissionService::TENANTS_UPDATE,
@@ -55,6 +56,7 @@ class UserLifecycleService
             'duration_ms' => 0,
         ];
 
+        // Advisory lock prevents concurrent runs (e.g. cron and a manual trigger at the same time).
         if (!$this->acquireLock()) {
             $result['ok'] = false;
             $result['locked'] = true;