Protect private API routes and scope agent data

SovereignAI-Starter/tests/test_web_search_api.py

@@ -10,9 +10,8 @@ if "SOVEREIGNAI_DATA_DIR" not in os.environ:
     _TEST_DATA_DIR = tempfile.TemporaryDirectory(prefix="sovereignai-web-search-tests-")
     os.environ["SOVEREIGNAI_DATA_DIR"] = _TEST_DATA_DIR.name
 
-from fastapi.testclient import TestClient
-
 from app.main import app
+from tests.api_client import authenticated_client
 
 
 class _FakeSearchClient:
@@ -33,7 +32,7 @@ class _FakeSearchClient:
 class WebSearchApiTests(unittest.TestCase):
     @classmethod
     def setUpClass(cls) -> None:
-        cls.client = TestClient(app)
+        cls.client = authenticated_client(app)
 
     def test_search_returns_per_source_and_total_fetch_durations(self) -> None:
         candidates = [