feat(doctor): claim captcha+mobile, owner profile delete, admin map zoom fix

- DoctorClaimController: ALTCHA CaptchaGuard on /claim (dev no-op via
  ALTCHA_ENABLED=false); optional `mobile` field must match the logged-in
  user's number (422 ERR_CONFLICT_001 on mismatch)
- DoctorController::delete: now IS_AUTHENTICATED_FULLY — admin (any) or the
  owner of a claimed profile (IDOR-guarded); FK appointment guard kept
- DoctorDetailPage address map: MapController calls map.invalidateSize()
  before flyTo (fixes needing to pick a city twice on a freshly-mounted map);
  geocode retries once (nominatim empty/429 on first hit)
- tests: mobile mismatch, owner-delete allowed + others 403, unclaimed not
  deletable by random user
- docs: doctor-claim.md (mobile+captcha), doctor.md (delete permission)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs/api/doctor.md

@@ -269,7 +269,7 @@ Updated doctor object (same structure as GET single).
 
 Delete a doctor profile.
 
-**Permission:** `ROLE_ADMIN`
+**Permission:** `IS_AUTHENTICATED_FULLY` — **admin** (any profile) **or the owner** of a `claimed` profile (`doctor.user === current user`). Other users get `403`.
 
 > **Side effect:** the doctor's insurance configuration (`tenant_insurances`, `entity_insurance_pricing`, and their `tenant_service_coverages`) is purged in the same request — these reference the doctor via a polymorphic `entity_id` with no DB FK, so the cleanup is enforced in the application.
 
@@ -292,8 +292,8 @@ Delete a doctor profile.
 | Code | HTTP | Description |
 |------|------|-------------|
 | `ERR_AUTH_001` | 401 | Missing token |
-| `ERR_AUTH_006` | 403 | Not admin |
-| `ERR_NOT_FOUND_001` | 404 | Doctor not found |
+| `ERR_FORBIDDEN_001` | 403 | Not admin and not the owner of this claimed profile |
+| `ERR_VALIDATION_002` | 404 | Doctor not found |
 | `ERR_CONFLICT_001` | 409 | Doctor has existing appointments and cannot be deleted |
 
 ---