Expand description
HTTP handlers for ContractorEvaluation (Story 3.9 — FR34 FR35 INV-21 INV-24).
Routes:
POST /contractor-evaluations— create (syndic/superadmin)GET /contractor-evaluations/{id}— fetch detailsGET /contractors/{contractor_user_id}/evaluations— list for a contractor
All routes are JWT-protected. GET /contractor-evaluations/{id} took
AuthenticatedUser without using it (_user) and is now cloisonnée via
verify_technical_spec_org_access (#882). GET /contractors/{contractor_user_id}/evaluations remains classified but
unfixed — see the comment above list_contractor_evaluations: a product
decision is needed first.