fix(security): enforce admin auth guards across sensitive backend routes and eliminate BOM data leak

apps/backend/src/routes/product-attributes.ts

@@ -155,10 +155,6 @@ export const productAttributesRoute = new Elysia()
 
       if (!definition) return status(404, { message: "Attribute definition not found" });
       return localizeAttributeDefinition(definition, lang);
-    } catch (err: any) {
-      return status(400, { message: err.message });
-    }
-  })
   .get("/products/:id/attributes", async ({ params, query, status }) => {
     try {
       const productId = parseId(params.id, "product ID");