handlers: image/reindex/auth via use cases; auth::authenticate replaces ensure_active; check-handler-services guard

crates/adapters/http-axum/src/html/images.rs

@@ -12,7 +12,8 @@ pub async fn get_image(
     if key.starts_with("http://") || key.starts_with("https://") {
         return axum::response::Redirect::temporary(&key).into_response();
     }
-    match state.app_ctx.services.object_storage.get(&key).await {
+    match application::images::get_image::execute(&state.app_ctx.deps.images.get_image, &key).await
+    {
         Ok(bytes) => {
             let mime = infer::get(&bytes)
                 .map(|t| t.mime_type())