update docs

server/handler/snapshots.go

@@ -49,12 +49,14 @@ func (h *Handler) SnapshotMonthlyList(w http.ResponseWriter, r *http.Request) {
 // SnapshotReportDownload streams a snapshot table as XLSX.
 // @Summary Download snapshot report
 // @Description Downloads a snapshot table as an XLSX file.
+// @Description Requires Bearer authentication with the viewer role (admin also allowed).
 // @Tags snapshots
 // @Produce application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
 // @Param table query string true "Snapshot table name"
 // @Success 200 {file} file "Snapshot XLSX report"
 // @Failure 400 {object} models.ErrorResponse "Invalid request"
 // @Failure 500 {object} models.ErrorResponse "Server error"
+// @Security BearerAuth
 // @Router /api/report/snapshot [get]
 func (h *Handler) SnapshotReportDownload(w http.ResponseWriter, r *http.Request) {
 	ctx, cancel := withRequestTimeout(r, reportRequestTimeout)