feat(api): expose scoped preventive candidates

api-v3/src/inspection-visits/inspection-preventive-candidates.controller.ts

@@ -0,0 +1,17 @@
+import { Controller, Get, Param, ParseUUIDPipe, Query } from '@nestjs/common';
+import { RequirePermissions } from '../authorization/decorators/require-permissions.decorator';
+import { InspectionPreventiveCandidatesService } from './inspection-preventive-candidates.service';
+
+@Controller('inspection-visits')
+export class InspectionPreventiveCandidatesController {
+  constructor(private readonly candidates: InspectionPreventiveCandidatesService) {}
+
+  @Get(':id/preventive-candidates')
+  @RequirePermissions('inspections.read')
+  list(
+    @Param('id', new ParseUUIDPipe({ version: '4' })) id: string,
+    @Query('search') search?: string,
+  ) {
+    return this.candidates.list(id, search);
+  }
+}