fix(openflare): align admin permission model with Wavelet

Unify OpenFlare console auth to user.IsAdmin and token_admin instead of
the legacy Admin/Root role tiers. Route groups now use
apiutil.AdminMiddlewares (LoginRequired + LoginAdminRequired) so admin
checks cannot be skipped. Add middleware tests and extend integration
coverage for 401/404/400 responses.

Wavelet/internal/router/v1/openflare/register_dashboard.go

@@ -11,7 +11,7 @@ import (
 
 func registerDashboardRoutes(apiGroup *gin.RouterGroup) {
 	dashboardRoute := apiGroup.Group("/dashboard")
-	dashboardRoute.Use(apiutil.AdminRequired())
+	dashboardRoute.Use(apiutil.AdminMiddlewares()...)
 	{
 		dashboardRoute.GET("/overview", dashboard.GetOverviewHandler)
 	}