feat(api): standardize REST contracts and auth

tests/api/test_access_endpoints.py

@@ -34,7 +34,7 @@ def test_access_context_returns_global_admin_permissions_without_project():
     repo = SimpleNamespace()
     client = _build_client(user, repo)
 
-    response = client.get("/api/v1/access/context")
+    response = client.get("/api/v1/access-context")
 
     assert response.status_code == 200
     payload = response.json()
@@ -64,7 +64,7 @@ def test_access_context_returns_project_member_permissions():
     client = _build_client(user, repo)
 
     response = client.get(
-        "/api/v1/access/context",
+        "/api/v1/access-context",
         headers={"X-Project-Id": str(project_id)},
     )