Saufi a41ff59009 feat: security hardening (Fasa 10) ...

- EnsureIsAdmin middleware: gates all admin routes on is_admin flag
- Apply admin middleware to entire admin route group
- Fix questionnaire resource route parameter name mismatch ({set})
- Audit log on questionnaire confirmation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-16 23:54:11 +08:00

621 B

Raw Blame History

View Raw