Authenticated log disclosure via missing scope checks

Missing authorization in Ech0 before 4.4.3 allows remote authenticated users to read sensitive system logs through dashboard endpoints. The dashboard router applies JWT authentication but omits an administrator scope check, while its handlers and service return historical logs or establish SSE and WebSocket streams without a compensating authorization decision. Any valid non-administrator session is sufficient, and the exposed output can contain file paths, stack traces, administrative activity, background-job output, and internal URLs.