fix(security): F01 授权门禁不可被配置关闭 + F02 业务坐标按可信来源隔离（含唯一键 SQL）

src/main/java/com/yunhai/flowcenter/service/FlowOapiSourceScope.java

@@ -6,7 +6,6 @@ import com.yunhai.flowcenter.repository.FlwTaskRepository;
 import com.yunhai.platform.apistd.BizException;
 import com.yunhai.platform.utils.exception.ErrorCode;
 import lombok.RequiredArgsConstructor;
-import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Component;
 import org.springframework.web.context.request.RequestContextHolder;
 import org.springframework.web.context.request.ServletRequestAttributes;
@@ -22,11 +21,9 @@ public class FlowOapiSourceScope implements HandlerInterceptor {
     private final FlowSourcePrincipalResolver resolver;
     private final FlwInstanceRepository instances;
     private final FlwTaskRepository tasks;
-    @Value("${flow-center.formal-command.enabled:false}") private boolean enabled;
 
     @Override
     public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) {
-        if (!enabled) return true;
         String source = resolver.resolve((String) request.getAttribute("yh.app.auth")).id;
         request.setAttribute(ATTRIBUTE, source);
         String id = request.getParameter("instanceId");