docs: refresh README; allow monitor JWT for RDG qwinsta/logoff (0.20.6)

Update platform docs for current features; Seaca and web operators with
monitor role can trigger WinRM actions via SAC API.

backend/app/api/v1/events.py

@@ -9,7 +9,7 @@ from sqlalchemy import func, select
 from sqlalchemy.orm import Session, joinedload
 
 from app.auth.api_key import get_api_key_auth
-from app.auth.jwt_auth import get_current_user, require_admin
+from app.auth.jwt_auth import get_current_user, CurrentUser
 from app.config import get_settings
 from app.database import get_db
 from app.models import Event, Host
@@ -212,12 +212,12 @@ class LogoffActionBody(BaseModel):
 def post_event_qwinsta(
     event_db_id: int,
     db: Session = Depends(get_db),
-    user=Depends(require_admin),
+    user: CurrentUser = Depends(get_current_user),
 ) -> AgentCommandResponse:
     event = db.get(Event, event_db_id)
     if event is None:
         raise HTTPException(status_code=404, detail="Event not found")
-    cmd = execute_qwinsta_via_winrm(db, event, requested_by=str(user))
+    cmd = execute_qwinsta_via_winrm(db, event, requested_by=user.username)
     db.commit()
     return _agent_command_response(cmd)
 
@@ -227,7 +227,7 @@ def post_event_logoff(
     event_db_id: int,
     body: LogoffActionBody,
     db: Session = Depends(get_db),
-    user=Depends(require_admin),
+    user: CurrentUser = Depends(get_current_user),
 ) -> AgentCommandResponse:
     event = db.get(Event, event_db_id)
     if event is None:
@@ -236,7 +236,7 @@ def post_event_logoff(
         db,
         event,
         session_id=body.session_id,
-        requested_by=str(user),
+        requested_by=user.username,
     )
     db.commit()
     return _agent_command_response(cmd)