S3 Tables API now properly enforces resource policies

addressing the critical security gap where policies were created but never evaluated.

weed/s3api/s3tables/handler_bucket_create.go

@@ -16,7 +16,7 @@ func (h *S3TablesHandler) handleCreateTableBucket(w http.ResponseWriter, r *http
 	// Check permission
 	accountID := h.getAccountID(r)
 	principal := h.getPrincipalFromRequest(r)
-	if !CanCreateTableBucket(principal, accountID) {
+	if !CanCreateTableBucket(principal, accountID, "") {
 		h.writeError(w, http.StatusForbidden, ErrCodeAccessDenied, "not authorized to create table buckets")
 		return NewAuthError("CreateTableBucket", principal, "not authorized to create table buckets")
 	}