Fix chat attachments and avatars

backend/src/main/java/com/petshop/backend/controller/UserAvatarController.java

@@ -24,7 +24,7 @@ public class UserAvatarController {
     }
 
     @GetMapping("/{userId}/avatar/file")
-    @PreAuthorize("hasAnyRole('STAFF', 'ADMIN')")
+    @PreAuthorize("isAuthenticated()")
     public ResponseEntity<Resource> getUserAvatarFile(@PathVariable Long userId) {
         User user = userRepository.findById(userId).orElse(null);
         if (user == null || !avatarStorageService.hasAvatar(user)) {

backend/src/main/java/com/petshop/backend/service/AvatarStorageService.java

@@ -22,7 +22,6 @@ import java.util.UUID;
 public class AvatarStorageService {
 
     private static final String STORED_PREFIX = "/uploads/avatars/";
-    private static final String OWNER_ENDPOINT = "/api/v1/auth/me/avatar/file";
 
     @Value("${app.upload.base-dir:uploads}")
     private String uploadBaseDir;
@@ -65,7 +64,7 @@ public class AvatarStorageService {
     }
 
     public String toOwnerAvatarUrl(User user) {
-        return hasAvatar(user) ? OWNER_ENDPOINT : null;
+        return hasAvatar(user) ? "/api/v1/users/" + user.getId() + "/avatar/file" : null;
     }
 
     public String toStoredAvatarUrl(String avatarFilenamePath) {