[Console] Add Spark application team-level permission checks

[shangeyao]

Problem

PermissionAspect only resolves Flink applications for @Permission checks. Spark application endpoints rely on Shiro role permissions but lack team-level isolation, allowing cross-team access when role permissions are broad.

Proposed solution

• Extend PermissionAspect to resolve Spark applications when Flink lookup misses
• Add @Permission annotations to SparkApplicationController mirroring FlinkApplicationController

[shangeyao]

Closing because related PR #4395 was closed without merge. Console frontend is being refactored; this work is deferred.