Run Bob with the user's own permissions

Confirmed AI actions run with the signed-in user's permissions. `run_python` runs in a restricted namespace, and DocTypes Bob creates no longer get Guest read.