Add security policy for AI endpoints

[MarceloRGonc]

Fixes OPS-3894.

[linear]

OPS-3894 Apply security policy to AI endpoints

[Copilot]

Pull request overview

Adds project-scoped route security policies to AI-related API endpoints so they are consistently tagged with the same authorization policy metadata used across the rest of the API.

Changes:

• Add getProjectScopedRoutePolicy(...) to AI config routes.
• Add getProjectScopedRoutePolicy(...) to MCP config routes.
• Add getProjectScopedRoutePolicy(...) to MCP chat and related AI chat routes.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
packages/server/api/src/app/mcp/config/mcp-config.controller.ts	Applies a project-scoped route security policy to MCP config CRUD routes.
packages/server/api/src/app/ai/config/ai-config.controller.ts	Applies a project-scoped route security policy to AI config routes (save/list/get/delete).
packages/server/api/src/app/ai/chat/ai-mcp-chat.controller.ts	Applies a project-scoped route security policy to AI MCP chat endpoints (open/send/rename/delete/list/update model/code generation).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud