perf: 去掉 handler 内层重复鉴权

鉴权只保留各路由 r.use 一次，受保护请求少一轮会话查库。

apps/server/src/routes/admin-keys.ts

@@ -73,8 +73,6 @@ export function adminKeyRoutes() {
       },
     }),
     async (c) => {
-      const guard = await requireAdminSession(c, async () => {});
-      if (guard) return guard;
       const q = c.req.query();
       const filter: {
         member_id?: number | "unassigned";
@@ -129,8 +127,6 @@ export function adminKeyRoutes() {
       },
     }),
     async (c) => {
-      const guard = await requireAdminSession(c, async () => {});
-      if (guard) return guard;
       const body = await c.req.json().catch(() => null);
       const sk_key = typeof body?.sk_key === "string" ? body.sk_key.trim() : "";
       let member_id: number | null = null;
@@ -264,8 +260,6 @@ export function adminKeyRoutes() {
       },
     }),
     async (c) => {
-      const guard = await requireAdminSession(c, async () => {});
-      if (guard) return guard;
       const id = Number(c.req.param("id"));
       const body = await c.req.json().catch(() => null);
       const repos = c.get("repos");