fix(pcf): add missing auth middleware to smPolicyGroup and uePolicyGroup

[solar224]

@c9274326 @roundspring2003 PTAL

Problem

In NewServer(), smPolicyGroup and uePolicyGroup are registered without RouterAuthorizationCheck middleware:

// internal/sbi/server.go (before)
smPolicyGroup := s.router.Group(factory.PcfSMpolicyCtlResUriPrefix)
applyRoutes(smPolicyGroup, smPolicyRoutes) // no .Use(auth)

All other PCF service groups (amPolicyGroup, bdtPolicyGroup, oamGroup, policyAuthorizationGroup) attach auth middleware before registering routes. The missing middleware allows unauthenticated requests to bypass the 401 rejection and reach business handlers directly. When session context exists, an unauthenticated GET /npcf-smpolicycontrol/v1/sm-policies/{id} returns 200 with context.supi in the response body.

Fix

Add RouterAuthorizationCheck middleware to both groups, following the same pattern used by the other groups:

// internal/sbi/server.go
  smPolicyGroup := s.router.Group(factory.PcfSMpolicyCtlResUriPrefix)
+ smRouterAuthorizationCheck := util.NewRouterAuthorizationCheck(models.ServiceName_NPCF_SMPOLICYCONTROL)
+ smPolicyGroup.Use(func(c *gin.Context) {
+     smRouterAuthorizationCheck.Check(c, s.Context())
+ })
  ...
  
  applyRoutes(smPolicyGroup, smPolicyRoutes)
  uePolicyGroup := s.router.Group(factory.PcfUePolicyCtlResUriPrefix)
+ uePolicyRouterAuthorizationCheck := util.NewRouterAuthorizationCheck(models.ServiceName_NPCF_UE_POLICY_CONTROL)
+ uePolicyGroup.Use(func(c *gin.Context) {
+     uePolicyRouterAuthorizationCheck.Check(c, s.Context())
+ })
  applyRoutes(uePolicyGroup, uePolicyRoutes)

Unauthenticated requests to all Npcf_SMPolicyControl endpoints now receive 401 before any business logic is executed.
Fixes: free5gc/free5gc#844