enforce authentication in API tests and improve error handling for unauthenticated requests

[dwelch-r7]

Was getting this stacktrace

Msf::WebServices::MetasploitApiApp [-] Error handling request: opts must include a valid :workspace.
    Call Stack:
	 /Users/dwelch/dev/metasploit-framework/lib/msf/util/db_manager.rb:37:in `process_opts_workspace'
	 /Users/dwelch/dev/metasploit-framework/lib/msf/core/db_manager/host.rb:164:in `block in hosts'
	 /Users/dwelch/.rvm/gems/ruby-3.3.8@metasploit-framework/gems/activerecord-7.2.2.2/lib/active_record/connection_adapters/abstract/connection_pool.rb:415:in `with_connection'
	 /Users/dwelch/dev/metasploit-framework/lib/msf/core/db_manager/host.rb:158:in `hosts'

dug into it and it seems like a brittle test that was logging out the error but not causing the test itself to fail, this PR addresses that

Verification steps

• CI passes
• The stacktrace does not appear in the CI logs
• bundle exec rspec spec/api/metasploit_api_app_spec.rb

[smcintyre-r7]

FWIW, I've also been getting this stack trace a lot lately. Thanks for taking a look into it.