feat: Make requests system good

Right now the request dashboard doesn't check if a user is on the Media team before allowing management of tickets. Lowkey, not sure if this is even possible right now. Maybe an officer db type jawn? Not a clue.

Locate the request dashboard and ticket management flow in the codebase first (frontend page/route and the API call it uses). Find where ticket create/update/delete actions are authorized and check whether user role/team is validated before write operations. Add/extend the Media-team check in that auth path, then run request-related tests or perform a manual dashboard workflow to confirm non-Media users cannot manage tickets.

由索引模型根据 Issue 内容生成。