Scope knowledge and image libraries by brand

server/internal/tenant/transport/router.go

@@ -268,6 +268,7 @@ func RegisterRoutes(app *bootstrap.App) {
 	monitoring.POST("/brands/:brand_id/collect-now", monitoringHandler.CollectNow)
 
 	knowledge := tenantProtected.Group("/knowledge")
+	knowledge.Use(middleware.RequireCurrentBrand())
 	knowledgeHandler := NewKnowledgeHandler(app)
 	knowledge.GET("/groups", knowledgeHandler.ListGroups)
 	knowledge.POST("/groups", knowledgeHandler.CreateGroup)
@@ -315,14 +316,16 @@ func RegisterRoutes(app *bootstrap.App) {
 
 	images := tenantProtected.Group("/images")
 	imgHandler := NewImageHandler(app)
+	images.GET("/storage-usage", imgHandler.StorageUsage)
+	images.Use(middleware.RequireCurrentBrand())
 	images.GET("", imgHandler.ListImages)
 	images.POST("", imgHandler.UploadImage)
 	images.PUT("/:id", imgHandler.UpdateImage)
 	images.GET("/:id/references", imgHandler.GetImageReferences)
 	images.DELETE("/:id", imgHandler.DeleteImage)
-	images.GET("/storage-usage", imgHandler.StorageUsage)
 
 	imageFolders := tenantProtected.Group("/images/folders")
+	imageFolders.Use(middleware.RequireCurrentBrand())
 	imageFolders.GET("", imgHandler.ListFolders)
 	imageFolders.POST("", imgHandler.CreateFolder)
 	imageFolders.PUT("/:id", imgHandler.UpdateFolder)