fix(procmgr): refresh spawn user before launching child

Move refresh_intended_user ahead of platform spawn so a slow account
lookup cannot hold the manager lock while a new child is still unwatched.

Author: jose-manuel-almaza

pkg/procmgr/rust/src/process.rs

@@ -421,6 +421,9 @@ impl ManagedProcess {
         #[cfg(windows)]
         let _console_guard = platform::console_lock();
 
+        // Resolve intended spawn user before creating the child so a slow lookup
+        // cannot block the manager lock while an unwatched process is starting.
+        self.refresh_intended_user();
         let handle = platform::spawn_child_handle(self)?;
 
         self.pid = handle.id();
@@ -432,7 +435,6 @@ impl ManagedProcess {
         );
 
         self.handle = Some(handle);
-        self.refresh_intended_user();
         self.transition_to(ProcessState::Running);
         self.restarts.mark_spawned();
         Ok(())
@@ -970,6 +972,23 @@ pub mod tests {
         assert_eq!(status.code(), Some(7));
     }
 
+    #[tokio::test]
+    async fn test_spawn_refreshes_intended_user_before_running() {
+        let (cmd, args) = test_helpers::true_cmd();
+        let mut proc = ManagedProcess::new_config(
+            "spawn-user-refresh".into(),
+            test_helpers::test_uuid(),
+            test_helpers::make_config(cmd, args),
+        );
+        let expected = spawn_user_for(proc.name(), proc.profile());
+        proc.spawn().unwrap();
+        assert_eq!(proc.user(), expected);
+        assert!(proc.is_running());
+        let _ = proc.wait().await;
+    }
+
+    // -- signal tests (Unix-only: test the raw send_signal API) --
+
     #[cfg(unix)]
     #[tokio::test]
     async fn test_send_signal_sigterm() {