relax sec exec

src/main/java/com/olympus/hermione/security/config/SecurityConfig.java

@@ -68,6 +68,8 @@ public class SecurityConfig {
             .csrf().disable()
             .authorizeHttpRequests(auth -> auth
                 .requestMatchers("/api/auth/**", "/login").permitAll()
+                .requestMatchers("/scenarios/execute-async").permitAll()
+                .requestMatchers("/scenarios/getExecutionProgress/**").permitAll()
                 .anyRequest().authenticated()
             )
             .authenticationProvider(authenticationProvider())