feat(appointments): add role-based access to findAll endpoint

restrict access to the GET appointments endpoint to FACILITY_ADMIN and FACILITY_STAFF roles

src/appointments/appointments.controller.ts

@@ -33,6 +33,7 @@ export class AppointmentsController {
   }
 
   @Get()
+  @Roles("FACILITY_ADMIN", "FACILITY_STAFF")
   findAll(@Request() req: any) {
     return this.appointmentsService.findAll(req.user.healthcareWorker.facilityId);
   }