`get_current_user` Uses `Depends()` Default but Is Also Called Directly

[ayahaustine]

File: internal_admin/auth/routes.py

get_current_user has db: Session = Depends(get_session) as a parameter default, but in site.py it is called as a plain function: get_current_user(request, self.config, db_session). Mixing DI-aware signatures with manual calls is confusing and error-prone.

[ayahaustine]

Suggested fix: Separate the core logic into a plain function (no Depends defaults) and create a thin DI wrapper for FastAPI route injection.