refactor(auth): simplify authorization checks to use membership only

- Remove explicit ADMIN role checks in API handlers
- Replace combined creator/member role checks with membership-only filters
- Update seed data roles to reflect changed authorization logic
- Add migration to insert hunt creators as members for consistent checks
- Prevent removal of hunt creator as a member with new explicit check
- Adjust related user role updates and queries accordingly
- Upgrade dependencies including nuxt and zod for compatibility

server/api/admin/answer/[answerId]/review.post.ts

@@ -4,9 +4,6 @@ import prisma from '~~/lib/prisma';
 export default defineEventHandler(async (event) => {
   const user = await requireUserSession(event);
 
-  if (user.user.role !== 'ADMIN') {
-    throw createError({ status: 403, statusText: 'Not allowed!' });
-  }
   const userId = user.user.id;
   const { answerId } = await useValidatedParams(
     event,
@@ -18,26 +15,15 @@ export default defineEventHandler(async (event) => {
   const answer = await prisma.questAnswer.findUnique({
     where: {
       id: answerId,
-      OR: [
-        {
-          quest: {
-            hunt: {
-              creatorId: userId
-            }
-          }
-        },
-        {
-          quest: {
-            hunt: {
-              members: {
-                some: {
-                  memberId: userId
-                }
-              }
+      quest: {
+        hunt: {
+          members: {
+            some: {
+              memberId: userId
             }
           }
         }
-      ]
+      }
     },
     select: { id: true }
   });