printedparts: catalog access is printedparts.view-gated

Browsing the catalog (item list, detail, file listings) now requires
authentication plus the view permission, and the /printedparts pages
and the label print page require login. Still deliberately open: the
kiosk endpoints per the decision record, the image serve and file
download (img tags and anchor downloads cannot carry a JWT), and the
reports (product-wide jwt-optional convention). Grant
printedparts.view to the roles that should see the catalog.

frontend/src/router/index.js

@@ -118,10 +118,12 @@ const routes = [
     meta: { plugin: 'usb' }
   },
   {
+    // Unlike the other print pages this one requires login: it lists the
+    // whole catalog, which is printedparts.view-gated at the API.
     path: '/print/printedparts-labels',
     name: 'print-printedparts-labels',
     component: () => import('../views/print/PrintedPartsLabels.vue'),
-    meta: { plugin: 'printedparts' }
+    meta: { requiresAuth: true, plugin: 'printedparts' }
   },
   {
     path: '/',

frontend/src/router/routes/printedparts.js

@@ -12,7 +12,7 @@ export default [
     path: 'printedparts',
     name: 'printedparts',
     component: () => import('../../views/printedparts/PrintedItemsList.vue'),
-    meta: { plugin: 'printedparts' }
+    meta: { requiresAuth: true, plugin: 'printedparts' }
   },
   {
     path: 'printedparts/new',
@@ -24,7 +24,7 @@ export default [
     path: 'printedparts/:id',
     name: 'printedparts-detail',
     component: () => import('../../views/printedparts/PrintedItemDetail.vue'),
-    meta: { plugin: 'printedparts' }
+    meta: { requiresAuth: true, plugin: 'printedparts' }
   },
   {
     path: 'printedparts/:id/edit',