feat(admin): normalize Persian/Arabic digits in every numeric field

Users typing on a Persian keyboard produced two distinct failures. Fields with
type="number" silently returned an empty string — the browser rejects Persian
digits, so the value was lost and saved as empty or zero. Text fields passed the
Persian characters straight through to the database, where a mobile stored as
۰۹۱۲… never matches 09… again. The secretary form hit the second case with no
validation at all.

Frontend:
- Adds digitsOnly() and the national-code schemas to lib/utils, plus lib/forms
  with numericField()/latinDigitsField() wrappers for React Hook Form fields.
- Converts every type="number" input to type="text" inputMode="numeric" with
  digit normalization; none remain. Fields that legitimately carry non-digits
  (sheba, landline) only get the digits translated, keeping IR and separators.
- Points the patient national-code and mobile schemas at the shared normalizing
  schemas, which accept Persian input instead of rejecting it.
- Drops two duplicate local digit converters in favour of the shared helper.

Backend:
- Adds NumericFieldNormalizerSubscriber, translating digits in whitelisted
  numeric keys of JSON request bodies under /api/v1/ before controllers run, so
  nobat724_front and clinic-pro-tauri are covered too. Translation only — no
  characters are stripped, non-string values and other keys are untouched.

Three component tests asserted on role="spinbutton" and numeric input values;
both are properties of type="number", so they were updated to match the new
text inputs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

assets/admin/pages/MySecretariesPage.tsx

@@ -7,7 +7,7 @@ import ConfirmDialog from "../components/ui/ConfirmDialog";
 import Modal from "../components/ui/Modal";
 import type { ApiResponse } from "../lib/api";
 import { api } from "../lib/api";
-import { formatDate } from "../lib/utils";
+import { formatDate, digitsOnly, IRAN_MOBILE_RE, IRAN_NATIONAL_CODE_RE } from "../lib/utils";
 import { useSubscription } from "../hooks/useSubscription";
 import { useAuthStore } from "../stores/authStore";
 import type { Secretary, SecretaryPermissions } from "../types";
@@ -230,6 +230,8 @@ function DefaultTextField({
     disabled,
     multiline,
     rows,
+    numeric,
+    maxDigits,
 }: {
     placeholder?: string;
     value: string;
@@ -237,6 +239,9 @@ function DefaultTextField({
     disabled?: boolean;
     multiline?: boolean;
     rows?: number;
+    /** فیلد فقط‌عددی: ارقام فارسی/عربی به لاتین تبدیل و غیررقم حذف می‌شود. */
+    numeric?: boolean;
+    maxDigits?: number;
 }) {
     const cls =
         "w-full bg-[#FAFAFA] dark:bg-[#222433] rounded-[8px] border border-[#D7D7D7] dark:border-[#343645] " +
@@ -260,7 +265,8 @@ function DefaultTextField({
             placeholder={placeholder}
             value={value}
             disabled={disabled}
-            onChange={(e) => onChange(e.target.value)}
+            {...(numeric ? { type: "tel", inputMode: "numeric" as const, dir: "ltr" as const } : {})}
+            onChange={(e) => onChange(numeric ? digitsOnly(e.target.value, maxDigits) : e.target.value)}
         />
     );
 }
@@ -363,8 +369,10 @@ function SecretaryModal({
         if (!form.name.trim()) return toast.error("لطفاً نام را وارد کنید");
         if (!form.family.trim()) return toast.error("لطفاً نام خانوادگی را وارد کنید");
         if (!form.telephone.trim()) return toast.error("لطفاً شماره تلفن را وارد کنید");
-        if (!/^09\d{9}$/.test(form.telephone))
+        if (!IRAN_MOBILE_RE.test(digitsOnly(form.telephone, 11)))
             return toast.error("شماره تلفن باید 11 رقم و با 09 شروع شود");
+        if (form.national_code.trim() && !IRAN_NATIONAL_CODE_RE.test(digitsOnly(form.national_code, 10)))
+            return toast.error("کد ملی باید ۱۰ رقم باشد");
         if (showDoctorPicker && doctorUuids.length === 0)
             return toast.error("حداقل یک پزشک را انتخاب کنید");
         onSubmit(form, doctorUuids);
@@ -434,11 +442,11 @@ function SecretaryModal({
                 <div className="w-full grid grid-cols-1 md:grid-cols-2 gap-[16px]">
                     <div className="flex w-full flex-col items-start justify-start gap-[12px]">
                         <p className="w-full text-right text-[#525252] dark:text-[#D7D8ED] text-[14px] font-medium">شماره موبایل</p>
-                        <DefaultTextField placeholder="09121234567" value={form.telephone} onChange={(v) => setField("telephone", v)} disabled={disabled || mode === "edit"} />
+                        <DefaultTextField numeric maxDigits={11} placeholder="09121234567" value={form.telephone} onChange={(v) => setField("telephone", v)} disabled={disabled || mode === "edit"} />
                     </div>
                     <div className="flex w-full flex-col items-start justify-start gap-[12px]">
                         <p className="w-full text-right text-[#525252] dark:text-[#D7D8ED] text-[14px] font-medium">کد ملی</p>
-                        <DefaultTextField placeholder="کد ملی" value={form.national_code} onChange={(v) => setField("national_code", v)} disabled={disabled} />
+                        <DefaultTextField numeric maxDigits={10} placeholder="کد ملی" value={form.national_code} onChange={(v) => setField("national_code", v)} disabled={disabled} />
                     </div>
                 </div>
 
@@ -770,9 +778,9 @@ function MySecretariesPageContent() {
     const createMutation = useMutation({
         mutationFn: ({ form, doctorUuids }: { form: FormState; doctorUuids: string[] }) => {
             const base = {
-                mobile_number: form.telephone,
+                mobile_number: digitsOnly(form.telephone, 11),
                 name: `${form.name} ${form.family}`.trim(),
-                national_code: form.national_code || null,
+                national_code: digitsOnly(form.national_code, 10) || null,
                 address: form.address || null,
                 permissions: { version: 1, resources: form.permission },
             };
@@ -800,7 +808,7 @@ function MySecretariesPageContent() {
         mutationFn: ({ uuid, form }: { uuid: string; form: FormState }) =>
             api.patch(`/api/v1/secretary/${uuid}`, {
                 name: `${form.name} ${form.family}`.trim(),
-                national_code: form.national_code || null,
+                national_code: digitsOnly(form.national_code, 10) || null,
                 address: form.address || null,
                 permissions: { version: 1, resources: form.permission },
             }),