feat(billing): patient payments list + patient invoices detail (doctor/clinic)

Port two nobat724 Figma screens into the admin SPA for the doctor/clinic
tenant panel:

- node 1 — لیست پرداخت‌ها (/admin/my-payments): per-patient payment summary
  (invoice count, paid, remaining, derived status paid/unsettled/unpaid),
  filters by national code / status / Jalali date range, pagination.
- node 2 — پرداخت‌های ثبت‌شده (/admin/my-payments/:patientUuid): a patient's
  recorded invoices with patient header, service title, total, status badge,
  and an expandable per-invoice item breakdown.

Backend (App\Billing):
- InvoiceRepository::patientPaymentSummary/countPatientPaymentSummary — DQL
  aggregation grouped by patient record (arbitrary join Invoice→PatientRecord
  →User), draft/void excluded, derived-status HAVING filters.
- InvoiceRepository::invoicesForPatient/count + InvoiceService methods that
  shape rows and derive status.
- BillingController: GET /api/v1/my/billing/patient-payments and
  GET /api/v1/my/billing/patients/{patientUuid}/invoices (thin, resolveEntity,
  tenant-scoped, 403/404). Invoice::getIssuedAt / InvoiceItem::getTitle added.
- docs/api/billing.md documents both endpoints.

Frontend: useMyPayments hooks, MyPaymentsPage, MyPaymentDetailPage, routes in
App.tsx (doctor/secretary/clinic, blockClinicScope) and a sidebar entry.
Persian strings hardcoded per existing admin convention (no i18n infra).

Tests: tests/Billing/PatientPaymentsTest.php (8), useMyPayments + both page
tests (11). Note: pre-existing LoginPage.test failures are unrelated (proven
by stashing this change).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/Billing/Controller/BillingController.php

@@ -12,6 +12,7 @@ use App\Billing\Service\InvoiceService;
 use App\Clinic\Repository\ClinicRepository;
 use App\Doctor\Repository\DoctorRepository;
 use App\Insurance\Repository\InsuranceRepository;
+use App\Patient\Repository\PatientRecordRepository;
 use App\Patient\Repository\PatientSessionRepository;
 use App\Shared\Constant\ErrorCodes;
 use App\Shared\Controller\BaseController;
@@ -33,6 +34,7 @@ class BillingController extends BaseController
         private readonly ClaimService               $claimService,
         private readonly ClaimRepository            $claimRepo,
         private readonly PatientSessionRepository   $sessionRepo,
+        private readonly PatientRecordRepository    $recordRepo,
         private readonly DoctorRepository           $doctorRepo,
         private readonly ClinicRepository           $clinicRepo,
         private readonly InsuranceRepository        $insuranceRepo,
@@ -154,6 +156,73 @@ class BillingController extends BaseController
         return $this->success(['data' => $invoice->toArray()]);
     }
 
+    /**
+     * لیست پرداخت‌ها — یک ردیف به‌ازای هر بیمار با جمع صورتحساب‌ها.
+     * فیلترها: national_code، status (paid|unsettled|unpaid)، from/to (unix ثانیه).
+     * پاسخ صفحه‌بندی: هر ردیف { patient_uuid, patient_name, national_code,
+     * invoice_count, paid_rials, remaining_rials, status }.
+     */
+    #[Route('/api/v1/my/billing/patient-payments', methods: ['GET'])]
+    public function listPatientPayments(Request $request, #[CurrentUser] User $user): JsonResponse
+    {
+        [$entityType, $entityId] = $this->resolveEntity($user);
+        if ($entityId === null) {
+            return $this->error(ErrorCodes::ERR_FORBIDDEN_001, 'پروفایل یافت نشد', 403);
+        }
+
+        $filters = [
+            'national_code' => $request->query->get('national_code') ?: null,
+            'status'        => $request->query->get('status') ?: null,
+            'from'          => $request->query->get('from') ?: null,
+            'to'            => $request->query->get('to') ?: null,
+        ];
+        $page  = max(1, (int) $request->query->get('page', 1));
+        $limit = min(100, max(1, (int) $request->query->get('limit', 20)));
+
+        $result = $this->invoiceService->patientPaymentList($entityType, $entityId, $filters, $page, $limit);
+
+        return $this->paginated($result['items'], $result['total'], $page, $limit);
+    }
+
+    /**
+     * پرداخت‌های ثبت‌شده‌ی یک بیمار — سربرگ بیمار + فهرست صفحه‌بندی‌شده‌ی صورتحساب‌ها.
+     * فقط مالک رکورد (همان tenant) اجازه دارد؛ در غیر این صورت ۴۰۴.
+     * پاسخ: { patient:{uuid,name,national_code}, data:[صورتحساب‌ها], meta:{...} }.
+     */
+    #[Route('/api/v1/my/billing/patients/{patientUuid}/invoices', methods: ['GET'])]
+    public function listPatientInvoices(string $patientUuid, Request $request, #[CurrentUser] User $user): JsonResponse
+    {
+        [$entityType, $entityId] = $this->resolveEntity($user);
+        if ($entityId === null) {
+            return $this->error(ErrorCodes::ERR_FORBIDDEN_001, 'پروفایل یافت نشد', 403);
+        }
+
+        $record = $this->recordRepo->findByUuid($patientUuid);
+        if ($record === null || $record->getEntityType() !== $entityType || $record->getEntityId() !== $entityId) {
+            return $this->error(ErrorCodes::ERR_NOT_FOUND_001, 'بیمار یافت نشد', 404);
+        }
+
+        $page  = max(1, (int) $request->query->get('page', 1));
+        $limit = min(100, max(1, (int) $request->query->get('limit', 20)));
+
+        $result  = $this->invoiceService->patientInvoiceList($entityType, $entityId, $record->getId(), $page, $limit);
+        $patient = $record->getUser();
+
+        return $this->success([
+            'patient' => [
+                'uuid'          => $record->getUuid(),
+                'name'          => $patient->getRealName(),
+                'national_code' => $patient->getNationalCode(),
+            ],
+            'data' => $result['items'],
+            'meta' => [
+                'totalRecords' => $result['total'],
+                'totalPages'   => (int) ceil($result['total'] / $limit),
+                'currentPage'  => $page,
+            ],
+        ]);
+    }
+
     // ── Claims (مطالبات بیمه) ──────────────────────────────────────────────────
 
     #[Route('/api/v1/billing/claims', methods: ['POST'])]