fix: restore historical order visibility for HartOMat admins

backend/app/api/routers/orders.py

@@ -24,6 +24,7 @@ from app.models.product import Product
 from app.models.output_type import OutputType
 from app.models.cad_file import CadFile
 from app.models.user import User
+from app.domains.auth.models import PM_ROLES
 from app.schemas.order import OrderCreate, OrderOut, OrderDetailOut, OrderItemOut, RejectOrderRequest
 from app.schemas.order_line import OrderLineCreate, OrderLineOut
 from app.schemas.product import ProductOut
@@ -35,7 +36,7 @@ router = APIRouter(prefix="/orders", tags=["orders"])
 
 
 def _is_privileged(user: User) -> bool:
-    return user.role.value in ("admin", "project_manager")
+    return user.role.value in PM_ROLES
 
 
 def _result_path_to_url(result_path: str) -> str | None: