update docs

server/handler/vmCreateEvent.go

@@ -15,6 +15,7 @@ import (
 // VmCreateEvent records a VM creation CloudEvent.
 // @Summary Record VM create event (deprecated)
 // @Description Deprecated: Parses a VM create CloudEvent and stores the event data.
+// @Description Requires Bearer authentication with the admin role.
 // @Tags events
 // @Deprecated
 // @Accept json
@@ -23,6 +24,7 @@ import (
 // @Success 200 {object} models.StatusMessageResponse "Create event processed"
 // @Failure 400 {object} models.ErrorResponse "Invalid request"
 // @Failure 500 {object} models.ErrorResponse "Server error"
+// @Security BearerAuth
 // @Router /api/event/vm/create [post]
 func (h *Handler) VmCreateEvent(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodPost {