feat(sprint-002): user-management 나머지 12곳 requirePage 전환 완료

- consumableItemRoutes: requireAdmin → requirePage('tkuser.consumables')
- equipmentRoutes: requireAdmin → requirePage('tkuser.equipments')
- partnerRoutes: requireAdminOrPermission → requirePage('tkuser.partners') + 구문 에러 수정
- vendorRoutes: requireAdmin → requirePage('tkuser.vendors')

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

user-management/api/routes/consumableItemRoutes.js

@@ -1,6 +1,9 @@
 const express = require('express');
 const router = express.Router();
-const { requireAuth, requireAdmin } = require('../middleware/auth');
+const { requireAuth } = require('../middleware/auth');
+const { createRequirePage } = require('../../../shared/middleware/pagePermission');
+const { getPool } = require('../../shared/config/database');
+const requirePage = createRequirePage(getPool);
 const ctrl = require('../controllers/consumableItemController');
 const { consumableUpload } = require('../middleware/upload');
 
@@ -8,8 +11,8 @@ router.use(requireAuth);
 
 router.get('/', ctrl.list);
 router.get('/:id', ctrl.getById);
-router.post('/', requireAdmin, consumableUpload.single('photo'), ctrl.create);
-router.put('/:id', requireAdmin, consumableUpload.single('photo'), ctrl.update);
-router.delete('/:id', requireAdmin, ctrl.deactivate);
+router.post('/', requirePage('tkuser.consumables'), consumableUpload.single('photo'), ctrl.create);
+router.put('/:id', requirePage('tkuser.consumables'), consumableUpload.single('photo'), ctrl.update);
+router.delete('/:id', requirePage('tkuser.consumables'), ctrl.deactivate);
 
 module.exports = router;