Add user authentication and role management

app/api/resources-export/route.ts

@@ -1,4 +1,4 @@
-import { adminForbidden, isAdminRequest } from "../../../lib/admin-auth";
+import { isManagerRequest, managerForbidden } from "../../../lib/user-auth";
 import { parseStoredDate } from "../../../lib/date-utils";
 import { ensureSchema, getRawDb } from "../../../lib/mvp-db";
 import {
@@ -48,7 +48,7 @@ function exactArrayBuffer(bytes: Uint8Array) {
 }
 
 export async function POST(request: Request) {
-  if (!isAdminRequest(request)) return adminForbidden();
+  if (!(await isManagerRequest(request))) return managerForbidden();
   try {
     const body = (await request.json()) as { accountIds?: unknown };
     if (!Array.isArray(body.accountIds)) {