fix: restore historical order visibility for HartOMat admins

backend/app/api/routers/uploads.py

@@ -10,6 +10,7 @@ from pydantic import BaseModel
 
 from app.config import settings
 from app.database import get_db
+from app.domains.auth.models import PM_ROLES
 from app.models.cad_file import CadFile, ProcessingStatus
 from app.models.order import Order
 from app.models.order_item import OrderItem
@@ -491,7 +492,7 @@ async def add_material_alias_from_validation(
     from app.domains.materials.models import Material, MaterialAlias
 
     # Gate to admin/PM
-    if user.role.value not in ("admin", "project_manager"):
+    if user.role.value not in PM_ROLES:
         raise HTTPException(status_code=403, detail="Admin or project_manager required")
 
     # Verify the validation exists