fix: SaTokenConfigure 增加请求路径直接判断作为兜底防护

三层鉴权跳过机制：
1. SaHolder.getRequest().getRequestPath() 直接判断路径
2. @SaIgnore 注解检查
3. Spring excludePathPatterns 路径排除

Co-Authored-By: Claude <noreply@anthropic.com>

car-wash-admin/src/main/java/com/kym/admin/config/SaTokenConfigure.java

@@ -1,8 +1,11 @@
 package com.kym.admin.config;
 
 import cn.dev33.satoken.annotation.SaIgnore;
+import cn.dev33.satoken.context.SaHolder;
 import cn.dev33.satoken.interceptor.SaInterceptor;
 import cn.dev33.satoken.stp.StpUtil;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
 import org.springframework.context.annotation.Configuration;
 import org.springframework.web.method.HandlerMethod;
 import org.springframework.web.servlet.config.annotation.InterceptorRegistry;
@@ -15,22 +18,31 @@ import org.springframework.web.servlet.config.annotation.WebMvcConfigurer;
  */
 @Configuration
 public class SaTokenConfigure implements WebMvcConfigurer {
+
+    private static final Logger log = LoggerFactory.getLogger(SaTokenConfigure.class);
+
     // 注册拦截器
     @Override
     public void addInterceptors(InterceptorRegistry registry) {
         // 注册 Sa-Token 拦截器，校验规则为 StpUtil.checkLogin() 登录校验。
         registry.addInterceptor(new SaInterceptor(handler -> {
-                    // 检查 @SaIgnore 注解，有则跳过鉴权
+                    // 1. 通过请求路径判断：login 接口不鉴权
+                    String path = SaHolder.getRequest().getRequestPath();
+                    if ("/admin-user/login".equals(path)) {
+                        log.debug("SaInterceptor: 跳过 login 接口鉴权");
+                        return;
+                    }
+                    // 2. 检查 @SaIgnore 注解，有则跳过鉴权
                     if (handler instanceof HandlerMethod hm) {
                         if (hm.hasMethodAnnotation(SaIgnore.class)
                                 || hm.getBeanType().isAnnotationPresent(SaIgnore.class)) {
+                            log.debug("SaInterceptor: @SaIgnore 跳过鉴权 - {}", hm.getMethod().getName());
                             return;
                         }
                     }
                     StpUtil.checkLogin();
                 }))
                 .addPathPatterns("/**")
-                // login接口不鉴权
                 .excludePathPatterns(
                         "/wx/*",
                         "/finance/export/*",