refactor(web): update service clients

- services/agentAssets.js: update agent assets service client
- services/api.js: update API service client
- services/employees.js: update employees service client

web/src/services/agentAssets.js

@@ -1,4 +1,4 @@
-import { apiRequest } from './api.js'
+import { apiRequest, pickSafeHeaderValue } from './api.js'
 
 const AUTH_USER_STORAGE_KEY = 'x-financial-auth-user'
 
@@ -14,7 +14,11 @@ function readActorName() {
 
   try {
     const payload = JSON.parse(raw)
-    return String(payload?.name || payload?.username || 'system').trim() || 'system'
+    return (
+      pickSafeHeaderValue(payload?.name, payload?.username) ||
+      pickSafeHeaderValue(payload?.username, 'system') ||
+      'system'
+    )
   } catch {
     return 'system'
   }