feat: add cookie sessions and backend role authorization

backend/app/api/routes/documents.py

@@ -5,6 +5,7 @@ from sqlalchemy.orm import Session
 from app.db.session import get_db
 from app.models import Document, KnowledgeItem, Source
 from app.schemas.catalog import AuditRead, DocumentCreate, DocumentRead, DocumentUpdate, Page
+from app.services.auth import require_admin
 from app.services.catalog import (
     ensure_version,
     get_item,
@@ -15,7 +16,7 @@ from app.services.catalog import (
     update_values,
 )
 
-router = APIRouter(prefix="/documents", tags=["documents"])
+router = APIRouter(prefix="/documents", tags=["documents"], dependencies=[Depends(require_admin)])
 
 
 @router.get("", response_model=Page[DocumentRead])