feat(server): add project RBAC and guarded workflows

tests/api/test_audit_endpoints.py

@@ -1,4 +1,5 @@
 from unittest.mock import AsyncMock
+from uuid import uuid4
 
 from fastapi.testclient import TestClient
 
@@ -10,7 +11,12 @@ from app.auth.metadata_dependencies import (
 from tests.conftest import build_test_app, make_audit_log
 
 
-def _build_client(repo, *, metadata_admin=None, metadata_user=None) -> TestClient:
+def _build_client(
+    repo,
+    *,
+    metadata_admin=None,
+    metadata_user=None,
+) -> TestClient:
     app = build_test_app(audit_endpoint.router, "/audit")
     app.dependency_overrides[audit_endpoint.get_audit_repository] = lambda: repo
     if metadata_admin is not None: