feat: 增加工作流和知识库三级权限

- 抽取统一资源访问骨架与部门可见范围判断

- 接入工作流和知识库的 READ/MANAGE 权限校验

- 增加可见范围配置与只读态前端交互

easyflow-starter/easyflow-starter-all/src/main/resources/db/migration/V10__knowledge_visibility_scope.sql

@@ -0,0 +1,6 @@
+ALTER TABLE tb_document_collection
+    ADD COLUMN visibility_scope VARCHAR(32) NULL COMMENT '可见范围';
+
+UPDATE tb_document_collection
+SET visibility_scope = 'PUBLIC'
+WHERE visibility_scope IS NULL OR visibility_scope = '';

easyflow-starter/easyflow-starter-all/src/main/resources/db/migration/V9__workflow_visibility_scope.sql

@@ -0,0 +1,6 @@
+ALTER TABLE tb_workflow
+    ADD COLUMN visibility_scope VARCHAR(32) NULL COMMENT '可见范围';
+
+UPDATE tb_workflow
+SET visibility_scope = 'PUBLIC'
+WHERE visibility_scope IS NULL OR visibility_scope = '';