FlowCmdM -> DBCmd or HasNodeStory is usually enough

- DBCmd instead of Cmd
- remove FlowCmdM in favor of HasNodeStory

This commit partially undo the access policy checks for the
GraphQL endpoints, until we find a better story to correlate
the `user_id` we sometimes receive with the info from the
`AuthenticatedUser`.

This commit partially undo the access policy checks for the
GraphQL endpoints, until we find a better story to correlate
the `user_id` we sometimes receive with the info from the
`AuthenticatedUser`.

This commit partially undo the access policy checks for the
GraphQL endpoints, until we find a better story to correlate
the `user_id` we sometimes receive with the info from the
`AuthenticatedUser`.

It can be used to "bolt-on" policy checking into Servant API routes.

This fixes commit 5d5300cd which
automatically changed all 'return' to 'pure' in our code, resulting in
broken SQL etc.

The issue was that when search was performed, the initial table didn't
have an archive ready and so first commit resulted in some errors on
the frontend. This fix performs the commit after flow is finished.

This commit also uses a temporary fork of boolexpr.
It allows to parse certain terms like "Niki" without choking.