MOAD-0001 (CWE-407): CLEAN
Taiga-back uses set() and dict() for membership checks throughout.
apply_order_updates uses a set for updated_order_ids; calculate_permissions
returns set(). No list.contains() inside loops found in hot paths.
