fix: make FrontendType mandatory in require_module_access

The require_module_access dependency was using path-based detection to
determine admin vs vendor authentication, which failed for API routes
(/api/v1/admin/*) because it only checked for /admin/*.

Changes:
- Make frontend_type parameter mandatory (was optional with fallback)
- Remove path-based detection logic from require_module_access
- Update all 33 module route files to pass explicit FrontendType:
  - 15 admin routes use FrontendType.ADMIN
  - 18 vendor routes use FrontendType.VENDOR

This ensures authentication method is explicitly declared at route
definition time, making it independent of URL structure and future-proof
for API version changes.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

app/modules/messaging/routes/api/admin.py

@@ -11,13 +11,14 @@ Aggregates all admin messaging routes:
 from fastapi import APIRouter, Depends
 
 from app.api.deps import require_module_access
+from app.modules.enums import FrontendType
 
 from .admin_messages import admin_messages_router
 from .admin_notifications import admin_notifications_router
 from .admin_email_templates import admin_email_templates_router
 
 admin_router = APIRouter(
-    dependencies=[Depends(require_module_access("messaging"))],
+    dependencies=[Depends(require_module_access("messaging", FrontendType.ADMIN))],
 )
 
 # Aggregate all messaging admin routes