fix(auth): 修改权限校验允许超管直接创建和更新网站

- 新租户超管尚未被 grantCmsPermission 授予 cms:website:save 权限时允许直接创建首个站点
- 新租户超管尚未被 grantCmsPermission 授予 cms:website:update 权限时允许直接更新站点
- 更新了 save、update 和 updateAll 接口的 @PreAuthorize 注解以支持上述逻辑
- 添加注释说明注册流程中超管权限放宽的原因

src/main/java/com/gxwebsoft/cms/controller/CmsWebsiteController.java

@@ -92,7 +92,8 @@ public class CmsWebsiteController extends BaseController {
     return success(cmsWebsiteService.getByIdRelAll(id));
   }
 
-  @PreAuthorize("hasAuthority('cms:website:save')")
+  // 注册流程：新租户超管尚未被 grantCmsPermission 赋予 cms:website:save，允许超管直接创建首个站点
+  @PreAuthorize("hasAuthority('cms:website:save') or principal.getIsSuperAdmin() == true")
   @Operation(summary = "添加网站信息记录表")
   @PostMapping()
   public ApiResult<?> save(@RequestBody CmsWebsite cmsWebsite) {
@@ -127,7 +128,8 @@ public class CmsWebsiteController extends BaseController {
     return fail("创建失败");
   }
 
-  @PreAuthorize("hasAuthority('cms:website:update')")
+  // 注册流程：新租户超管尚未被 grantCmsPermission 赋予 cms:website:update，允许超管直接更新站点
+  @PreAuthorize("hasAuthority('cms:website:update') or principal.getIsSuperAdmin() == true")
   @Operation(summary = "修改网站信息记录表")
   @PutMapping()
   public ApiResult<?> update(@RequestBody CmsWebsite cmsWebsite) {
@@ -154,7 +156,8 @@ public class CmsWebsiteController extends BaseController {
     return fail("修改失败");
   }
 
-  @PreAuthorize("hasAuthority('cms:website:update')")
+  // 注册流程：新租户超管尚未被 grantCmsPermission 赋予 cms:website:update，允许超管直接更新站点
+  @PreAuthorize("hasAuthority('cms:website:update') or principal.getIsSuperAdmin() == true")
   @Operation(summary = "修改网站信息记录表")
   @PutMapping("/updateAll")
   public ApiResult<?> updateAll(@RequestBody CmsWebsite cmsWebsite) {