Authorize manual generation retries as new requests

app/security/policy.py

@@ -134,6 +134,8 @@ class ScopePolicy:
             return "generation:providers:read"
         if path.endswith("/cancel"):
             return "generation:jobs:cancel"
+        if path.endswith("/retry") and method == "POST":
+            return "generation:requests:create"
         if "/jobs/" in path or method == "GET":
             return "generation:requests:read"
         return "generation:requests:create"