Function update_ref_for_users 

pub async fn update_ref_for_users(
    state: &AppState,
    ref_id: Uuid,
    extra_user_ids: Vec<String>,
) -> Result<(), AppError>

Update state for all initialized users who hold permissions on a ref.

extra_user_ids allows callers to include additional users who should be updated (e.g. users whose permissions were revoked and who therefore no longer appear in the permissions table).