0f036a2ef6
The test was expecting Forbidden when no tenant context is provided, but the middleware actually returns BadRequest when X-Tenant-Id header is missing. Updated the test and added GetClubsCurrent_InvalidTenant_ReturnsForbidden to properly test the Forbidden case.