feat: harden CMPP delivery and platform workflows

api/src/app.module.ts

@@ -1,6 +1,7 @@
 import { MiddlewareConsumer, Module, NestModule } from '@nestjs/common';
 import { ConfigModule } from '@nestjs/config';
 import { AuditModule } from './audit/audit.module';
+import { ManualOperationAuditMiddleware } from './audit/manual-operation-audit.middleware';
 import { AuthModule } from './auth/auth.module';
 import { SessionValidationMiddleware } from './auth/session-validation.middleware';
 import { RequestContextMiddleware } from './common/request-context.middleware';
@@ -46,10 +47,10 @@ import { UsersModule } from './users/users.module';
     OpenApiModule,
   ],
   controllers: [HealthController],
-  providers: [RequestContextMiddleware, SessionValidationMiddleware],
+  providers: [RequestContextMiddleware, SessionValidationMiddleware, ManualOperationAuditMiddleware],
 })
 export class AppModule implements NestModule {
   configure(consumer: MiddlewareConsumer) {
-    consumer.apply(RequestContextMiddleware, SessionValidationMiddleware).forRoutes('*');
+    consumer.apply(RequestContextMiddleware, SessionValidationMiddleware, ManualOperationAuditMiddleware).forRoutes('*');
   }
 }