Authenticated administrative actions via missing permission checks

Authorization failure in Redon Hub before 1.0.2 allows remote authenticated users to execute administrative Discord commands. The product, tag, and user command handlers omit Discord administrator permission checks, so ordinary users reach operations that create, update, or delete records. Any Discord user able to invoke the bot can obtain products without payment and modify product, tag, and user data; the owner-only product-clear command remains restricted.