fix(treatment): let the operator actually record an area

Starting a session created area records with no device, and the panel only ever
read the device it never set — so every "اتمام این ناحیه" came back 422 with
"دستگاه این ناحیه مشخص نیست". The backend tests passed because they sent
resource_uuid explicitly; from the UI the flow was unusable end to end.

The device now inherits from the appointment's resource, which the secretary
already chose at booking; asking the operator again is taking one decision
twice. The session screen offers a picker per area on top of that, because one
session really does run bikini on an alexandrite and underarms on a diode.

Treating without a device is allowed: botox is an injection, and requiring a
device would make clinics invent a fake resource per injection. Sending readings
with no device is still rejected — there would be no schema to validate against.

A protocol whose service has no ResourceServiceOffering rows now says so in the
tab where the manager is standing. It does not block booking: "no offering means
any resource" is a deliberate, tested rule. But silence meant the gap surfaced
only when the operator was already in front of a patient.

Also adds the live timer the spec asked for, and wires slot-suggestions into the
unbooked queue — the endpoint existed and tested green but no screen called it.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

assets/admin/components/TreatmentProtocolTab.tsx

@@ -18,6 +18,8 @@ interface ProtocolStaff {
 
 interface TreatmentProtocol {
   uuid: string;
+  /** آیا هیچ منبعی این سرویس را ارائه می‌دهد؛ نبودش رزرو را قفل نمی‌کند ولی باید دیده شود. */
+  service_has_resources?: boolean;
   active: boolean;
   total_sessions: number;
   supervisor: { uuid: string; name: string } | null;
@@ -158,6 +160,19 @@ export default function TreatmentProtocolTab({ serviceUuid, canEdit }: {
         hint="سرویس‌هایی که در چند جلسه انجام می‌شوند — لیزر، بوتاکس، مزوتراپی. خاموش یعنی تک‌جلسه‌ای."
       />
 
+      {enabled && protocol !== null && protocol.service_has_resources === false && (
+        <div
+          className="card card-pad"
+          style={{ background: 'var(--warning-bg)', display: 'grid', gap: 4 }}
+        >
+          <strong style={{ fontSize: 13 }}>هیچ دستگاهی به این سرویس وصل نیست</strong>
+          <span style={{ fontSize: 12.5, color: 'var(--text-2)', lineHeight: 1.9 }}>
+            رزرو قفل نمی‌شود، ولی منشی می‌تواند این سرویس را روی هر منبعی ثبت کند و اپراتور فرم
+            دستگاه درست را نمی‌بیند. در «منابع» مشخص کنید کدام دستگاه‌ها این سرویس را می‌دهند.
+          </span>
+        </div>
+      )}
+
       {enabled && (
         <>
           <section style={{ display: 'grid', gap: 10 }}>