Use explicit decorators for authentication in route handlers

[esune]

Once this PR in ACA-Py is merged, endpoints will not be protected by the middleware and decorators will need to be added to the route handlers to explicitly require tenant or admin authentication.

All plugins exposing admin routes will need to be updated.