feat(security): complete capability messaging workflows

Tiku.Api/Controllers/PlatformAdminController.cs

@@ -89,6 +89,19 @@ public sealed class PlatformAdminController(
         return Ok(await platformAdminService.GetPlansAsync(ResolveActor(), query.ToQuery(), cancellationToken));
     }
 
+    [HttpPut("plans/{planCode}/modules")]
+    [Authorize(Policy = BackendPermissions.PlatformTenantManage)]
+    [EndpointSummary("替换 SaaS 套餐模块权益")]
+    [ProducesResponseType<PlatformPlanModuleEntitlements>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<PlatformPlanModuleEntitlements>> ReplacePlanModules(
+        string planCode,
+        ReplacePlatformPlanModulesDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await platformAdminService.ReplacePlanModulesAsync(
+            ResolveActor(), request.ToCommand(planCode), cancellationToken));
+    }
+
     [HttpPost("subscriptions")]
     [Authorize(Policy = BackendPermissions.PlatformTenantManage)]
     [EndpointSummary("创建或调整租户订阅")]
@@ -100,6 +113,20 @@ public sealed class PlatformAdminController(
         return Ok(await platformAdminService.UpsertSubscriptionAsync(ResolveActor(), request.ToCommand(), cancellationToken));
     }
 
+    [HttpPut("tenants/{tenantId:guid}/module-overrides/{moduleCode}")]
+    [Authorize(Policy = BackendPermissions.PlatformTenantManage)]
+    [EndpointSummary("设置租户模块覆盖")]
+    [ProducesResponseType<PlatformTenantModuleOverrideItem>(StatusCodes.Status200OK)]
+    public async Task<ActionResult<PlatformTenantModuleOverrideItem>> UpsertTenantModuleOverride(
+        Guid tenantId,
+        string moduleCode,
+        UpsertPlatformTenantModuleOverrideDto request,
+        CancellationToken cancellationToken)
+    {
+        return Ok(await platformAdminService.UpsertTenantModuleOverrideAsync(
+            ResolveActor(), request.ToCommand(tenantId, moduleCode), cancellationToken));
+    }
+
     [HttpGet("domains")]
     [Authorize(Policy = BackendPermissions.PlatformTenantManage)]
     [EndpointSummary("查询租户域名状态")]