fix(auth): require active user for admin routes

get_current_admin_user now depends on get_current_active_user so
disabled accounts cannot access admin endpoints.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ayoub3bidi

src/middleware/auth_guard.py

@@ -49,9 +49,9 @@ async def get_current_active_user(
 
 
 async def get_current_admin_user(
-    current_user: Annotated[User, Depends(get_current_user)],
+    current_user: Annotated[User, Depends(get_current_active_user)],
 ) -> User:
-    """Require that the current user is an admin."""
+    """Require that the current user is an active admin."""
     if current_user.is_admin is False:
         raise HTTPException(status_code=400, detail="User is not admin")
     return current_user