fix: restore historical order visibility for HartOMat admins

backend/app/api/routers/order_items.py

@@ -14,6 +14,7 @@ from app.models.cad_file import CadFile
 from app.models.order import Order, OrderStatus
 from app.models.order_item import OrderItem, ItemStatus
 from app.models.user import User
+from app.domains.auth.models import PM_ROLES
 from app.schemas.order import OrderItemOut
 from app.utils.auth import get_current_user
 
@@ -25,7 +26,7 @@ router = APIRouter(prefix="/orders", tags=["order_items"])
 # ---------------------------------------------------------------------------
 
 def _is_privileged(user: User) -> bool:
-    return user.role.value in ("admin", "project_manager")
+    return user.role.value in PM_ROLES
 
 
 async def _get_order_and_item(