Creator analytics endpoint does not verify contest ownership

[mahmudshayan2248]

Problem

GET /analytics/contest/:contestId/creator requires authentication but does not verify the requester is the contest creator/manager. Add ownership/admin authorization.

Source

Observed in the current main branch during a repository audit.