List Unclaimed Items Query

[kavinphan]

Description

Create a GET route handler at /api/unclaimedItems that returns a list of all UnclaimedItem records.

Success Criteria

• If the request does not have a valid session, then GET /api/unclaimedItems returns a 401 status code with JSON body {"message": "Session required"}
• GET /api/unclaimedItems returns a 200 status code and all UnclaimedItem records as JSON objects (include id, name, quantity, and expirationDate as an ISO-8601 string)
• The route handler is documented with a description of its function, parameters, and responses
• There is a test file that covers the success criteria