perf(reports): read every resource's calendar in one batch, and close the owed tests

Writing the query-count test that task 14 owed showed the growth was real: one
resource cost 10 queries, six cost 33 — about five per resource, because the
available-minutes figure walked each resource's calendar on its own.

Holidays, tenant overrides and branch hours are identical for every resource in
a report, so they now load once outside the loop; shifts and exceptions load for
all resources in one query each. The batched path is a new method rather than a
change to rawAvailability, which the booking engine also calls. The test pins
the shape of the growth, not an exact count.

Also landed:

- app:segment:seed-templates with beauty, dental and physio presets. Building
  four segments and their requirements by hand is the first thing a new clinic
  must do and the most tedious; this gives them something to edit instead of an
  empty page. It refuses to touch a service that already has segments unless
  --force, and it will not invent resource types the tenant never defined.
- book-all is all-or-nothing, proven rather than asserted: with a calendar open
  one day a week and a 1-2 day protocol gap, session one finds a slot and
  session two cannot, and every session must come back planned.
- credit_refundable: false takes the credit back with a negative adjustment and
  deletes nothing — the ledger stays append-only.
- the segments editor has frontend tests, including that it sends back what the
  user sees and renders read-only without the permission.

useBranches now returns [] for a non-array payload instead of throwing
"branches.map is not a function" and taking the page down with it.

BookingLocationsScanTest built a Clinic around a Doctor loaded from a different
manager, which Doctrine treats as a new entity; it flushed fine most runs and
failed on cascade in others. It now loads the doctor from the same manager.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

tests/Course/TreatmentCourseTest.php

@@ -448,6 +448,69 @@ class TreatmentCourseTest extends ApiTestCase
         self::assertCount(8, $course->getSessions()->toArray());
     }
 
+    /**
+     * ⭐ `book-all` همه یا هیچ است.
+     *
+     * تقویم فقط یک روزِ هفته باز است و فاصلهٔ پروتکل ۱ تا ۲ روز؛ پس جلسهٔ اول وقت پیدا
+     * می‌کند و جلسهٔ دوم نه. اگر تراکنش کار نکند، بیمار با یک نوبتِ تنها از یک دورهٔ
+     * هشت‌جلسه‌ای می‌ماند و هیچ‌کس نمی‌فهمد کجا قطع شد.
+     */
+    public function testAFailedBookAllLeavesEverySessionPlanned(): void
+    {
+        [$user, $section, $address, $doctor, $patient] = $this->clinicWithPatient();
+        $service = $this->service($section);
+
+        $type = $this->authJson('POST', '/api/v1/resource-types', $user, [
+            'address_uuid' => $address->getUuid(),
+            'code'         => 'room',
+            'name'         => 'اتاق',
+        ]);
+        self::assertSame(201, $this->responseCode(), json_encode($type, JSON_UNESCAPED_UNICODE));
+
+        $resource = $this->authJson('POST', '/api/v1/resource', $user, [
+            'address_uuid' => $address->getUuid(),
+            'type_uuid'    => $type['data']['uuid'],
+            'name'         => 'اتاق ۱',
+        ]);
+        self::assertSame(201, $this->responseCode());
+
+        // فقط شنبه‌ها باز است.
+        $this->authJson('PUT', "/api/v1/resource/{$resource['data']['uuid']}/calendar", $user, [
+            'days' => [6 => [['start_minute' => 540, 'end_minute' => 1020]]],
+        ]);
+        self::assertSame(200, $this->responseCode());
+
+        $this->authJson('PUT', "/api/v1/service-item/{$service->getUuid()}/segments", $user, [
+            'segments' => [
+                ['sequence' => 1, 'name' => 'جلسه', 'duration_minutes' => 30, 'requirements' => [['type_uuid' => $type['data']['uuid']]]],
+            ],
+        ]);
+        self::assertSame(200, $this->responseCode());
+
+        // بازهٔ ۱ تا ۲ روز: جلسهٔ دوم حتماً بیرون تنها روزِ باز می‌افتد.
+        $protocol = $this->protocol($user, $service, ['min_days' => 1, 'ideal_days' => 1, 'max_days' => 2]);
+        $started  = $this->startCourse($user, $patient, $protocol['uuid']);
+
+        $body = $this->authJson('POST', "/api/v1/treatment-course/{$started['uuid']}/book-all", $user, [
+            'branch_uuid' => $address->getUuid(),
+            'doctor_uuid' => $doctor->getUuid(),
+        ]);
+
+        self::assertSame(422, $this->responseCode(), json_encode($body, JSON_UNESCAPED_UNICODE));
+
+        $this->em->clear();
+        $course = $this->courseEntity($started['uuid']);
+
+        foreach ($course->getSessions() as $session) {
+            self::assertSame(
+                CourseSession::STATUS_PLANNED,
+                $session->getStatus(),
+                sprintf('جلسهٔ %d نباید رزرو مانده باشد', $session->getSessionNumber()),
+            );
+            self::assertNull($session->getAppointment());
+        }
+    }
+
     public function testAnotherClinicCannotSeeTheCourse(): void
     {
         [$owner, $section, , , $patient] = $this->clinicWithPatient();