feat: phase 2 - migrate all route guards to require_permission (75 guards, 21 files)

app/routes/metrics.py

@@ -6,7 +6,7 @@ from fastapi import APIRouter, Depends
 from fastapi.responses import PlainTextResponse
 
 from app.core.monitoring import generate_metrics
-from app.deps import require_admin
+from app.deps import get_current_user
 
 router = APIRouter(tags=["metrics"])
 
@@ -14,7 +14,7 @@ router = APIRouter(tags=["metrics"])
 @router.get(
     "/api/v1/metrics",
     response_class=PlainTextResponse,
-    dependencies=[Depends(require_admin)],
+    dependencies=[Depends(get_current_user)],
 )
 async def metrics():
     """Prometheus metrics endpoint.