Protect private API routes and scope agent data

SovereignAI-Starter/tests/test_agent_skills.py

@@ -5,7 +5,6 @@ import unittest
 from pathlib import Path
 from unittest.mock import AsyncMock, patch
 
-from fastapi.testclient import TestClient
 from fastapi import HTTPException
 
 _TEST_DATA_DIR = None
@@ -14,12 +13,13 @@ if "SOVEREIGNAI_DATA_DIR" not in os.environ:
     os.environ["SOVEREIGNAI_DATA_DIR"] = _TEST_DATA_DIR.name
 
 from app.main import AgentRequest, _execute_agent, app, safe_arithmetic
+from tests.api_client import authenticated_client
 
 
 class AgentSkillTests(unittest.TestCase):
     @classmethod
     def setUpClass(cls) -> None:
-        cls.client = TestClient(app)
+        cls.client = authenticated_client(app)
         cls.workspace = str(Path(__file__).resolve().parents[1])
 
     def test_skill_catalog_discloses_scope_and_permissions(self) -> None: