fix(api): enforce admin and RBAC permissions on model provider model credential GET endpoint (#41599) (#41600)

Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai>

api/tests/unit_tests/controllers/console/test_workspace_credential_mutation_permissions.py

@@ -9,6 +9,7 @@ from controllers.console.agent.roster import AgentAppApi
 from controllers.console.datasets.data_source import DataSourceApi
 from controllers.console.datasets.rag_pipeline.datasource_auth import DatasourceAuth
 from controllers.console.workspace.model_providers import ModelProviderCredentialApi
+from controllers.console.workspace.models import ModelProviderModelCredentialApi
 from controllers.console.workspace.tool_providers import ToolBuiltinProviderAddApi, ToolOAuthCustomClient
 
 
@@ -37,6 +38,7 @@ def test_workspace_credential_mutations_require_management_permission(
     "method",
     [
         ModelProviderCredentialApi.get,
+        ModelProviderModelCredentialApi.get,
     ],
 )
 def test_model_provider_credential_get_requires_admin_and_rbac(