Issue: piece-type REST APIs return 404 for authenticated guest users

Issue: piece-type REST APIs return 404 for authenticated guest users: a task in LegoFlow-SWE (Harbor dataset). Observed behavior: When a piece type module has publicApiProjection configured, anonymous users can access its GET API endpoints (e.g., /api/v1/thing ). However, authenticated users who…

The task

**Observed behavior:** When a piece type module has `publicApiProjection` configured, anonymous users can access its GET API endpoints (e.g., `/api/v1/thing`). However, authenticated users who do not have editing privileges (e.g., users with a role other than admin/editor) receive a 404 error when trying to access…

Part of Lego-X/LegoFlow-SWE.