refactor: move business logic out of presentation — ReadAssetFile, checksum, auth checks, MetadataValue conversions

crates/presentation/src/handlers/albums.rs

@@ -31,11 +31,12 @@ pub async fn create_album(
 
 pub async fn get_album(
     State(state): State<AppState>,
-    _claims: JwtClaims,
+    claims: JwtClaims,
     Path((album_id,)): Path<(uuid::Uuid,)>,
 ) -> Result<Json<AlbumResponse>, AppError> {
     let query = GetAlbumQuery {
         album_id: SystemId::from_uuid(album_id),
+        user_id: claims.user_id,
     };
     let album = state.get_album_handler.execute(query).await?;
     Ok(Json(AlbumResponse::from_domain(&album)))