Update permissions for backend project routes

[spwoodcock]

What type of PR is this? (check all applicable)

• 🍕 Feature
• 🐛 Bug Fix
• 📝 Documentation
• 🧑‍💻 Refactor
• ✅ Test
• 🤖 Build or CI
• ❓ Other (please specify)

Describe this PR

• I didn't realise we didn't have roles set on some project endpoints.
• This PR ensures login is required for all endpoints, to prevent spamming of the API by scrapers etc.
• I also ordered the large projects_routes file into sections, for mapper, manager, and org admin roles.
• Also adds a fix for the fmtm.dev.test domain in the updated CORS orgins logic: allows Playwright tests to succeed & deployment to happen.

Review Guide

Notes for the reviewer. How to test this change?

Checklist before requesting a review

• 📖 Read the FMTM Contributing Guide: https://github.com/hotosm/fmtm/blob/main/CONTRIBUTING.md
• 📖 Read the HOT Code of Conduct: https://docs.hotosm.org/code-of-conduct
• 👷‍♀️ Create small PRs. In most cases, this will be possible.
• ✅ Provide tests for your changes.
• 📝 Use descriptive commit messages.
• 📗 Update any related documentation and include any relevant screenshots.

[optional] What gif best describes this PR or how it makes you feel?

[spwoodcock]

Merging early to get the mapper frontend deployment out asap