User descriptions added after an event keep the email address when private information removal is on #2693

When a project has Automatically remove user identifiable information turned on, the event pipeline clears the email address from a user description sent with the event. A description added later through the user-description endpoint skips that step and is saved with the email address as submitted.

Where

• EventUserDescriptionsJob.ProcessUserDescriptionAsync copies EmailAddress into the UserDescription, merges Data, and saves the event. It never loads the project or checks its settings.
• EventHandler.Handle(SetEventUserDescription) loads the project but queues the email unchanged. This handles POST /api/v2/events/by-ref/{referenceId}/user-description, the project-scoped variant, and the legacy PATCH path.
• For comparison, RemovePrivateInformationPlugin sets description.EmailAddress = null when IncludePrivateInformation (@@IncludePrivateInformation) is false.

Steps to reproduce

1. In a project, turn on Automatically remove user identifiable information.
2. Submit an event with a reference id, e.g. "reference_id": "abc123", and no user description.
3. POST /api/v2/events/by-ref/abc123/user-description with {"email_address": "someone@example.com", "description": "It crashed"}.
4. After the user-descriptions job runs, open the event. The user description shows someone@example.com.

Submitting the same description inside the event in step 2 stores it without the email.

Expected

The email address is dropped from late user descriptions the same way it is for descriptions sent with the event.

Suggested fix

In EventHandler.Handle(SetEventUserDescription), where the project is already loaded, set EmailAddress to null before queuing when project.Configuration.Settings.GetBoolean(SettingsDictionary.KnownKeys.IncludePrivateInformation, true) is false. Dropping it before it reaches the queue also keeps it out of Redis. Alternatively, load the project in the job and apply the same check there. Add a test for the late-description path with the setting turned off.