feat(resource): resource calendars, exceptions and national holidays

Section 9 of the design document builds free time by subtracting seven layers.
Four existed and all of them hung off the doctor. This adds the missing ones and
puts them on the resource:

  branch hours ∩ resource shifts − national holidays − resource exceptions

Booked appointments and holds are deliberately NOT subtracted here — those are
tasks 06/07, as is intersecting several resources. The method is called
rawAvailability() so nobody mistakes the output for bookable time. Nothing in this
change calls SlotCalculatorService; the existing slot path stays frozen.

Four types of exception (leave, absence, maintenance, ad-hoc closure) share one
table because all four are "an interval subtracted from a resource's calendar";
splitting them would mean four queries per availability lookup instead of one.
Holiday overrides work in both directions: a clinic that opens on a public holiday,
and a clinic that closes on an ordinary day.

Every empty day carries a reason (national_holiday, no_shift, branch_closed,
outside_branch_hours, exception, …). Without it an empty response is
indistinguishable from a bug and the first person debugging has to read four tables
by hand.

Three real defects found on the way:

JalaliDateService.gregorianToJalali() was wrong — it returned [3006, 7, 3] for
2026-07-30 instead of [1405, 5, 8], roughly 1601 years off. jalaliYear(),
jalaliMonth(), jalaliMonthRange() and jalaliYearRange() all inherit that, so the
representation reports built on them have been filtering by nonsense ranges. The
class's own formatDateTime() was already correct because it used IntlDateFormatter,
so both conversions now go through the same mechanism, and JalaliDateServiceTest
pins Nowruz and the 6/31→7/1 boundary. There were no tests before, which is why
nobody noticed.

TimeInterval added a seconds-based midnight to a minutes-based interval, turning an
eight-hour shift into eight seconds. The conversion is now an explicitly named
minutesToAbsolute() so the unit change cannot happen silently again.

HolidayService.upsertNational() persisted but left flushing to the caller. Every
HTTP request reboots the kernel, so the caller often held a different
EntityManager: persist landed on one, flush on the other, and nothing was written
with no error at all. The write is now self-contained.

119 tests across tests/Resource, tests/Branch and tests/Representation. phpstan
clean on both touched domains.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/Shared/Tenant/GlobalTables.php

@@ -38,6 +38,7 @@ final class GlobalTables
         \App\Sms\Entity\SmsLog::class                   => 'لاگ ارسال؛ فقط شماره و قالب دارد، مالک ندارد',
         \App\Shared\Logging\AppLog::class               => 'لاگ سراسری برنامه',
         \App\Blog\Entity\Blog::class                    => 'محتوای عمومی مارکت‌پلیس',
+        \App\Resource\Entity\NationalHoliday::class     => 'تعطیلات رسمی کشور؛ per محیط کردنش معنای «کشوری» را از بین می‌برد — محیطی که خلافش کار می‌کند TenantHolidayOverride می‌زند',
 
         // هویت — یک شخص می‌تواند در چند محیط حضور داشته باشد
         \App\Auth\Entity\User::class            => 'هویت سراسری؛ رابطهٔ بیمار با محیط از patient_records می‌آید',
@@ -93,6 +94,7 @@ final class GlobalTables
         // تسک ۰۱)، پس ارث‌بری اینجا واقعی است. هیچ‌کدام uuid از request نمی‌گیرند:
         // تنها راهشان PUT روی /resource/{uuid}/skills و /resource-pool/{uuid}/members است.
         \App\Resource\Entity\ResourceSkill::class       => \App\Resource\Entity\ClinicResource::class,
+        \App\Resource\Entity\ResourceCalendar::class    => \App\Resource\Entity\ClinicResource::class,
         \App\Resource\Entity\ResourcePoolMember::class  => \App\Resource\Entity\ResourcePool::class,
 
         \App\Patient\Entity\SessionAuditLog::class      => \App\Patient\Entity\PatientSession::class,