WIP feat(api) add permissions checks where needed

[prmths128]

This will:

• add more permission checks
• differenciate 401 and 403
• add an initial_data script to add API test user to develop
• add auth to the e2e tests
• add db shell function to init script (temporary place)
• fix project permission check (it was using old db column)
• a few fixes to comply with changes

Notes:

• The 401 is managed by the router dependency. since we don't need to check in DB for that, I kept it at the router level if the enpoint is not public -> UserWithAuthDependency(error_if_not_found=True)
• the frontend has a lot of expectations on return data being mostly public => this will break