fix: scope DestroyUser to only delete target user's pre-auth keys

DestroyUser called ListPreAuthKeys(tx) which returns ALL keys in the
database, then deleted every one of them. This caused deleting any
single user to wipe all pre-auth keys system-wide.

Fix: query only keys belonging to the user being deleted using
tx.Where("user_id = ?", uid).Find(&keys).

Fixes: https://github.com/juanfont/headscale/issues/3154

hscontrol/db/users.go

@@ -58,8 +58,8 @@ func DestroyUser(tx *gorm.DB, uid types.UserID) error {
 		return ErrUserStillHasNodes
 	}
 
-	keys, err := ListPreAuthKeys(tx)
+	var keys []types.PreAuthKey
-	if err != nil {
+	if err := tx.Where("user_id = ?", uid).Find(&keys).Error; err != nil {
 		return err
 	}
 	for _, key := range keys {