Fix upgrade-status auth to use web session instead of sanctum

The endpoint is called from browser with session cookies, not API tokens.
Use 'web' and 'auth' middleware for proper session-based authentication.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

routes/api.php

@@ -26,12 +26,12 @@ Route::group([
 });
 
 Route::group([
-    'middleware' => ['auth:sanctum'],
+    'middleware' => ['web', 'auth'],
 ], function () {
     Route::get('/upgrade-status', [OtherController::class, 'upgradeStatus']);
 });
 Route::group([
-    'middleware' => ['auth:sanctum'],
+    'middleware' => ['web', 'auth'],
     'prefix' => 'v1',
 ], function () {
     Route::get('/upgrade-status', [OtherController::class, 'upgradeStatus']);