feat(appointments): per-resource tabs backed by a resource_uuid list filter

Resources now get their own tabs on the appointments page, alongside doctors.
An appointment on "Laser CO2" belongs to the device, not to whichever doctor
happens to stand behind it, so selecting a resource tab replaces the doctor
filter instead of stacking on top of it.

GET /api/v1/my/appointments gains an optional resource_uuid filter and returns
a `resource` object per row. The join is a leftJoin on purpose: appointments
created before the resource-first model have no resource and must not drop out
of the list.

The resource tab lives in the URL so Back and refresh restore the same view,
per the list-state rule in CLAUDE.md. The doctor tab is still useState; moving
it is a separate refactor and was left untouched.

Verified against the running app: filtering by a resource returns only its
appointments, a resource from another tenant returns an empty list (TenantFilter,
200 not 403), and legacy rows still list with resource: null.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

assets/admin/pages/AppointmentsPage.test.tsx

@@ -66,6 +66,10 @@ describe('AppointmentsPage — پروفایل کلینیک چندپزشکه', ()
       ] } });
       if (url.includes('appointment-slots')) return Promise.resolve({ success: true, data: { sessions: [], empty_reason: 'holiday' } });
       if (url.includes('/my/appointments')) return Promise.resolve({ success: true, data: [], meta: { totalRecords: 0, totalPages: 0, currentPage: 1 } });
+      if (url.includes('/api/v1/resources')) return Promise.resolve({ success: true, data: [
+        { uuid: 'r-1', name: 'اتاق ۱', type_name: 'اتاق درمان' },
+        { uuid: 'r-2', name: 'لیزر CO2', type_name: 'دستگاه لیزر' },
+      ] });
       return Promise.resolve({ success: true, data: [] });
     });
   });
@@ -77,6 +81,29 @@ describe('AppointmentsPage — پروفایل کلینیک چندپزشکه', ()
     expect(screen.queryByText('همه')).toBeNull();
   });
 
+  /**
+   * منابع مثل پزشکان تب خودشان را دارند: نوبتِ «لیزر CO2» به دستگاه تعلق دارد، نه به
+   * پزشکی که پشتش ایستاده.
+   */
+  it('برای هر منبع فعال یک تب نشان می‌دهد', async () => {
+    renderWithProviders(<AppointmentsPage />);
+    expect(await screen.findByText('لیزر CO2')).toBeInTheDocument();
+    expect(screen.getByText('اتاق ۱')).toBeInTheDocument();
+  });
+
+  /** تب فعال از URL خوانده می‌شود و فهرست با resource_uuid فیلتر می‌شود، نه doctor_uuid. */
+  it('تب منبع از URL خوانده می‌شود و فهرست را با resource_uuid می‌گیرد', async () => {
+    renderWithProviders(<AppointmentsPage />, { route: '/admin/appointments?resource=r-2' });
+    await screen.findByText('لیزر CO2');
+
+    const calls = get.mock.calls
+      .map((c: any[]) => c[0])
+      .filter((u: any) => typeof u === 'string' && u.includes('/my/appointments'));
+
+    expect(calls.some((u: string) => u.includes('resource_uuid=r-2'))).toBe(true);
+    expect(calls.some((u: string) => u.includes('doctor_uuid='))).toBe(false);
+  });
+
   it('auto-selects the first doctor so the timeline loads its slots', async () => {
     renderWithProviders(<AppointmentsPage />);
     await screen.findByText('دکتر محمدی');