has_access('settings.home') checks for a coop-only endpoint that doesn't
exist in market/cart/events services. Replace with g.rights.admin which
is set by the shared user_loader across all services.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>