将AI截图接口加入安全白名单，修复401未授权问题

/api/ai/roi/snap 作为img标签src使用时不带session，
需要像其他snap接口一样加入permitAll白名单

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

src/main/java/com/genersoft/iot/vmp/conf/security/WebSecurityConfig.java

@@ -101,6 +101,7 @@ public class WebSecurityConfig {
         defaultExcludes.add("/index/hook/abl/**");
         defaultExcludes.add("/api/jt1078/playback/download");
         defaultExcludes.add("/api/jt1078/snap");
+        defaultExcludes.add("/api/ai/roi/snap");
 
         if (userSetting.getInterfaceAuthentication() && !userSetting.getInterfaceAuthenticationExcludes().isEmpty()) {
             defaultExcludes.addAll(userSetting.getInterfaceAuthenticationExcludes());