Add missing permission validation on get_contract_template

CRM contract template endpoint was accessible without permission checks.