If a second PUT request to add a project with the same project ID is received before a first request reaches this line then the server will return a 500 error on the second request.
This is a low-impact and low-priority edge-case, but I encountered it in the test setup for testing duplicate add project requests, so I'm documenting it here so we don't forget it.
The fix would be to track inflight requests by projectId and await the first before continuing.