fix(news): use READ scope for the admin delivery-setting GET endpoint

The GET handler only reads `news:isDeliveryEnabled` via configManager,
so requiring `SCOPE.WRITE.ADMIN.APP` was over-permissive and
inconsistent with the wider convention (e.g. `app-settings/index.ts`
GET uses `SCOPE.READ.ADMIN.APP`, PUT/POST use the WRITE counterpart).
Switch the GET to `SCOPE.READ.ADMIN.APP`; the POST handler keeps
`SCOPE.WRITE.ADMIN.APP`.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

apps/app/src/features/news/server/routes/news.ts

@@ -192,7 +192,7 @@ export const createNewsRouter = (crowi?: Crowi): express.Router => {
    */
   router.get(
     '/admin/delivery-setting',
-    accessTokenParser([SCOPE.WRITE.ADMIN.APP]),
+    accessTokenParser([SCOPE.READ.ADMIN.APP]),
     loginRequiredStrictly,
     adminRequired,
     (_req, res) => {