Merge remote-tracking branch 'origin/main' into wilm

# Conflicts:
#	shopdb/__init__.py

shopdb/core/api/settings.py

@@ -576,7 +576,6 @@ def get_setting(key: str):
 
 
 @settings_bp.route('/<key>', methods=['PUT'])
-@jwt_required()
 @require_permission('settings.edit')
 def update_setting(key: str):
     """Update a setting value."""
@@ -635,7 +634,6 @@ def update_setting(key: str):
 
 
 @settings_bp.route('/test-email', methods=['POST'])
-@jwt_required()
 @require_permission('settings.edit')
 def test_email():
     """Send a test email to verify SMTP configuration.
@@ -673,7 +671,6 @@ def test_email():
 
 
 @settings_bp.route('', methods=['POST'])
-@jwt_required()
 @require_permission('settings.edit')
 def create_setting():
     """Create a new setting (admin only)."""
@@ -1299,7 +1296,6 @@ def build_default_settings():
 
 
 @settings_bp.route('/seed', methods=['POST'])
-@jwt_required()
 @require_permission('settings.edit')
 def seed_default_settings():
     """Seed default settings if they don't exist."""