Add AnalyticsAdminGuard restricting sensitive endpoints

[phertyameen]

Description

Add a guard (following the pattern of backend/src/roles/roles.guard.ts) that only allows users with an admin/staff role to access sensitive analytics endpoints (churn-risk, exports, raw event listing).

Why this matters

Analytics data can reveal individual user behavior; not all endpoints should be reachable by regular authenticated users.

Files to touch

• backend/src/analytics/guards/analytics-admin.guard.ts
• backend/src/roles/roles.decorator.ts

Acceptance Criteria

• Non-admin users receive a 403 on guarded routes
• Admin users pass through normally
• Guard is unit tested with both allow and deny cases

Notes

This issue is part of the new analytics module effort (tracking, aggregation,
and reporting on player/game activity). Please keep new code inside
backend/src/analytics/ following the same module/controller/service/provider
layout used by existing modules (e.g. progress, streak, quests).

[web3nova]

Hi! I'd love to work on this. I've gone through the description and I already know exactly what needs to be done. I'll deliver a clean, well-tested PR that meets every acceptance criterion. Can I get it assigned?

[web3nova]

Hi! I'd love to work on this. I've gone through the description and I already know exactly what needs to be done. I'll deliver a clean, well-tested PR that meets every acceptance criterion. Can I get it assigned?

[grantfox-oss]

🦊 GrantFox — @web3nova has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #551)
2. Your PR will be reviewed by the MindBlockLabs maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign | FWC26 campaign!

@web3nova's PR #603 was approved and merged by @A6dulmalik.

🏆 @web3nova: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (271 total points). Track your full progress on GrantFox.

👏 Great work, @web3nova! Keep contributing to MindBlockLabs.