Restrict get_email_html preview to System Manager

Require System Manager permission for the email preview endpoint to close an admin-only API exposure.