Fix chi router middleware ordering - move auth middleware to protected routes subrouter

go_cloud/internal/http/routes.go

@@ -59,7 +59,8 @@ func NewRouter(cfg *config.Config, db *database.DB, jwtManager *jwt.Manager, aut
 		})
 	})
 
-	// Auth middleware for protected routes
+	// Protected routes (with auth middleware)
+	r.Route("/", func(r chi.Router) {
 		r.Use(middleware.Auth(jwtManager, db))
 
 		// Org routes
@@ -102,6 +103,7 @@ func NewRouter(cfg *config.Config, db *database.DB, jwtManager *jwt.Manager, aut
 			updateMemberRoleHandler(w, req, db, auditLogger)
 		})
 	})
+	}) // Close protected routes
 
 	return r
 }