feat(patients): phase B2 — attachments (ضمیمه)

Add patient file attachments: a new PatientAttachment entity (record-scoped,
CASCADE) + repository, and endpoints GET /patient/{uuid}/attachments,
POST /patient/{uuid}/attachment (raw-body upload) and DELETE
/patient/attachment/{uuid} (owner-scoped). Factor the shared raw-body upload
logic into FileUploadService. Wire the "ضمیمه" tab in PatientDetailPage
(upload + list + delete). PHPUnit covers list/delete/ownership; Vitest covers
the tab. API docs updated.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/Patient/Repository/PatientAttachmentRepository.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App\Patient\Repository;
+
+use App\Patient\Entity\PatientAttachment;
+use App\Patient\Entity\PatientRecord;
+use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
+use Doctrine\Persistence\ManagerRegistry;
+
+class PatientAttachmentRepository extends ServiceEntityRepository
+{
+    public function __construct(ManagerRegistry $registry)
+    {
+        parent::__construct($registry, PatientAttachment::class);
+    }
+
+    public function findByUuid(string $uuid): ?PatientAttachment
+    {
+        return $this->findOneBy(['uuid' => $uuid]);
+    }
+
+    /** @return PatientAttachment[] */
+    public function findByRecord(PatientRecord $record): array
+    {
+        return $this->createQueryBuilder('a')
+            ->where('a.record = :record')
+            ->setParameter('record', $record)
+            ->orderBy('a.id', 'DESC')
+            ->getQuery()
+            ->getResult();
+    }
+
+    public function save(PatientAttachment $a): void
+    {
+        $this->getEntityManager()->persist($a);
+        $this->getEntityManager()->flush();
+    }
+
+    public function remove(PatientAttachment $a): void
+    {
+        $this->getEntityManager()->remove($a);
+        $this->getEntityManager()->flush();
+    }
+}