feat(secretary): implement scope separation for secretaries in clinics and personal practices

- Added `owner_type` and `clinic_id` fields to `DoctorSecretary` entity to distinguish between clinic and personal practice relationships.
- Updated repository methods to be scope-aware, allowing for specific queries based on the context of the secretary's relationship (clinic or doctor).
- Modified `SecretaryController` to handle secretary creation with appropriate scope based on the current user's role.
- Enhanced `AuthController` to build contexts that reflect the scope of the secretary's access.
- Updated `DashboardController` and `PatientController` to respect the new scope logic when retrieving data.
- Created migration to update the database schema accordingly, dropping the old unique constraint and adding the new fields and constraints.

src/Secretary/Entity/DoctorSecretary.php

@@ -3,15 +3,19 @@
 namespace App\Secretary\Entity;
 
 use App\Auth\Entity\User;
+use App\Clinic\Entity\Clinic;
 use App\Doctor\Entity\Doctor;
 use Doctrine\ORM\Mapping as ORM;
 use Symfony\Component\Uid\Uuid;
 
 #[ORM\Entity]
 #[ORM\Table(name: 'doctor_secretaries')]
-#[ORM\UniqueConstraint(name: 'idx_doctor_secretaries_pair', columns: ['doctor_id', 'secretary_id'])]
+#[ORM\UniqueConstraint(name: 'idx_doctor_secretary_scope', columns: ['doctor_id', 'secretary_id', 'owner_type'])]
 class DoctorSecretary
 {
+    public const OWNER_DOCTOR = 'doctor';
+    public const OWNER_CLINIC = 'clinic';
+
     public const DEFAULT_PERMISSIONS = [
         'version'   => 1,
         'resources' => [
@@ -38,6 +42,13 @@ class DoctorSecretary
     #[ORM\JoinColumn(name: 'secretary_id', referencedColumnName: 'id', nullable: false)]
     private User $secretary;
 
+    #[ORM\Column(name: 'owner_type', type: 'string', length: 10, options: ['default' => 'doctor'])]
+    private string $ownerType;
+
+    #[ORM\ManyToOne(targetEntity: Clinic::class)]
+    #[ORM\JoinColumn(name: 'clinic_id', referencedColumnName: 'id', nullable: true, onDelete: 'CASCADE')]
+    private ?Clinic $clinic = null;
+
     #[ORM\Column(name: 'permission', type: 'json', nullable: true)]
     private ?array $permissions = null;
 
@@ -50,25 +61,30 @@ class DoctorSecretary
     #[ORM\Column(name: 'updated_at', type: 'integer')]
     private int $updatedAt;
 
-    public function __construct(Doctor $doctor, User $secretary)
+    public function __construct(Doctor $doctor, User $secretary, string $ownerType = self::OWNER_DOCTOR, ?Clinic $clinic = null)
     {
         $this->uuid        = Uuid::v4()->toRfc4122();
         $this->doctor      = $doctor;
         $this->secretary   = $secretary;
+        $this->ownerType   = $ownerType;
+        $this->clinic      = $clinic;
         $this->permissions = self::DEFAULT_PERMISSIONS;
         $this->createdAt   = time();
         $this->updatedAt   = time();
     }
 
-    public function getId(): ?int       { return $this->id; }
-    public function getUuid(): string   { return $this->uuid; }
-    public function getDoctor(): Doctor { return $this->doctor; }
-    public function getSecretary(): User { return $this->secretary; }
+    public function getId(): ?int         { return $this->id; }
+    public function getUuid(): string     { return $this->uuid; }
+    public function getDoctor(): Doctor   { return $this->doctor; }
+    public function getSecretary(): User  { return $this->secretary; }
+    public function getOwnerType(): string { return $this->ownerType; }
+    public function getClinic(): ?Clinic  { return $this->clinic; }
     public function getPermissions(): array { return $this->permissions ?? self::DEFAULT_PERMISSIONS; }
-    public function isActive(): bool    { return $this->active; }
-    public function getCreatedAt(): int { return $this->createdAt; }
+    public function isActive(): bool      { return $this->active; }
+    public function getCreatedAt(): int   { return $this->createdAt; }
+    public function getUpdatedAt(): int   { return $this->updatedAt; }
 
-    public function setActive(bool $v): self  { $this->active = $v; $this->touch(); return $this; }
+    public function setActive(bool $v): self      { $this->active = $v; $this->touch(); return $this; }
     public function setPermissions(array $v): self { $this->permissions = $v; $this->touch(); return $this; }
 
     /** Deep merge: only provided resources/actions are updated */
@@ -102,6 +118,8 @@ class DoctorSecretary
             'mobile_number' => $this->secretary->getMobileNumber(),
             'doctor_name'   => $this->doctor->getName(),
             'doctor_uuid'   => $this->doctor->getUuid(),
+            'owner_type'    => $this->ownerType,
+            'clinic_uuid'   => $this->clinic?->getUuid(),
             'is_active'     => $this->active,
             'permissions'   => $this->getPermissions(),
             'created_at'    => $this->createdAt,