Fix email-api middleware order: API key check before swagger

UseInternalApiKeyProtection was registered after UseSwaggerInDevelopment,
allowing unauthenticated access to /swagger. Swapped order to match
rag-api and cv-matcher-api.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Apis/email-api/Program.cs

@@ -50,9 +50,8 @@ try
 
     app.UseDefaultSerilogRequestLogging();
     app.UseJsonExceptionHandler(ServiceName);
-    app.UseSwaggerInDevelopment("Email API", "EmailAPI");
-
     app.UseInternalApiKeyProtection();
+    app.UseSwaggerInDevelopment("Email API", "EmailAPI");
 
     app.UseRouting();
     app.UseAuthorization();