feat(appointment-settings): let clinics manage each member doctor's booking

The API and React components were already parameterized by doctor uuid, but 14
copy-pasted identity checks limited every endpoint to "the doctor themselves or
an admin", so a clinic owner could not touch a member doctor's booking setup.

- Replaces those 14 checks with one denyDoctorAccess() that also admits the
  owner of a clinic the doctor belongs to, and a member doctor holding the
  clinic's appointment_settings permission (view for GET, update for writes).
  A doctor's own settings short-circuit before any permission lookup.
- Moves ScheduleSection and its tabs out of DoctorDetailPage into
  components/schedule/ScheduleSection.tsx so the doctor panel and the new
  clinic page render the same module instead of one page importing another.
  Pure relocation — no logic changed.
- Adds ClinicAppointmentSettingsPage: one tab per clinic doctor, each rendering
  that same section. The tab wrapper is keyed by doctor uuid so in-progress
  schedule edits cannot leak onto the wrong doctor.
- insurance-pricing accepts an optional doctor_uuid (query on GET, body on PUT)
  under the same access rule, so the visit-price card works inside the clinic
  tabs. Fixes saveInsurancePricing calling getInsurancePricing with the wrong
  argument by extracting the shared pricingPayload().

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

assets/admin/pages/AppointmentSettingsPage.tsx

@@ -1,7 +1,7 @@
 import { useAuthStore } from '../stores/authStore';
 import SettingsLayout from '../components/layout/SettingsLayout';
 import FreeVisitPrice from '../components/FreeVisitPrice';
-import { ScheduleSection } from './DoctorDetailPage';
+import { ScheduleSection } from '../components/schedule/ScheduleSection';
 
 /**
  * مدیریت نوبت دهی — the doctor's appointment settings: visit price and the full

assets/admin/pages/ClinicAppointmentSettingsPage.tsx

@@ -0,0 +1,107 @@
+import { useMemo, useState } from 'react';
+import { Link } from 'react-router-dom';
+import { useQuery } from '@tanstack/react-query';
+import { UserGroupIcon } from '@heroicons/react/24/outline';
+import { api } from '../lib/api';
+import type { ApiResponse } from '../lib/api';
+import { useAuthStore } from '../stores/authStore';
+import SettingsLayout from '../components/layout/SettingsLayout';
+import { ScheduleSection } from '../components/schedule/ScheduleSection';
+import FreeVisitPrice from '../components/FreeVisitPrice';
+import type { ClinicDoctorItem } from '../components/ClinicDoctorsManager';
+
+/**
+ * تنظیمات نوبت‌دهی همه پزشکان کلینیک — یک تب به ازای هر پزشک.
+ *
+ * هر تب دقیقاً همان ScheduleSection پنل پزشک مستقل را رندر می‌کند؛ تنها تفاوت،
+ * امکان جابه‌جایی بین پزشکان است.
+ */
+function ClinicAppointmentSettingsContent() {
+  const { dbUuid, context, availableContexts } = useAuthStore();
+  const [activeUuid, setActiveUuid] = useState<string | null>(null);
+
+  // کاربری که هم پزشک است هم مالک کلینیک، dbUuid‌اش ممکن است uuid پزشک باشد.
+  const clinicUuid = useMemo(() => {
+    if (context?.type === 'clinic') return dbUuid;
+    return availableContexts.find(c => c.type === 'clinic')?.db_uuid ?? null;
+  }, [context, dbUuid, availableContexts]);
+
+  const doctorsQ = useQuery({
+    queryKey: ['clinic-doctors', clinicUuid],
+    queryFn:  () => api.get<ApiResponse<{ data: ClinicDoctorItem[] }>>(`/api/v1/clinic/doctor-list/${clinicUuid}`),
+    enabled:  !!clinicUuid,
+  });
+
+  const doctorList: ClinicDoctorItem[] = useMemo(() => {
+    const raw = doctorsQ.data?.data;
+    return (raw as any)?.data ?? raw ?? [];
+  }, [doctorsQ.data]);
+
+  const selected = activeUuid ?? doctorList[0]?.uuid ?? null;
+
+  if (!clinicUuid) {
+    return (
+      <div style={{ padding: 40, textAlign: 'center' }}>
+        <p style={{ color: 'var(--text-3)', fontSize: 14 }}>
+          {dbUuid ? 'کلینیکی برای این حساب کاربری یافت نشد' : 'در حال بارگذاری اطلاعات کلینیک...'}
+        </p>
+      </div>
+    );
+  }
+
+  return (
+    <div className="fade-in" style={{ display: 'flex', flexDirection: 'column', gap: 'var(--gap)' }}>
+      <div className="card-title-row">
+        <div>
+          <h1 className="section-title">مدیریت نوبت دهی</h1>
+          <div className="muted">تنظیمات نوبت‌دهی پزشکان کلینیک</div>
+        </div>
+      </div>
+
+      {doctorsQ.isLoading ? (
+        <div className="card card-pad"><p className="muted">در حال بارگذاری پزشکان...</p></div>
+      ) : doctorList.length === 0 ? (
+        <div className="card card-pad">
+          <div className="empty" style={{ padding: '20px 0' }}>
+            <UserGroupIcon style={{ width: 30, height: 30 }} />
+            <p className="muted">هیچ پزشکی به این کلینیک متصل نیست</p>
+            <Link className="btn primary sm" to="/admin/settings/clinic-doctors">مدیریت پزشکان کلینیک</Link>
+          </div>
+        </div>
+      ) : (
+        <>
+          <div className="card card-pad" style={{ paddingBottom: 12 }}>
+            <div className="seg" style={{ overflowX: 'auto', flexWrap: 'nowrap' }}>
+              {doctorList.map(doc => (
+                <button
+                  key={doc.uuid}
+                  className={selected === doc.uuid ? 'active' : ''}
+                  style={{ whiteSpace: 'nowrap' }}
+                  onClick={() => setActiveUuid(doc.uuid)}
+                >
+                  {doc.name}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          {/* key اجباری است: بدون آن state ویرایشِ برنامه بین پزشکان نشت می‌کند */}
+          {selected && (
+            <div key={selected}>
+              <FreeVisitPrice doctorUuid={selected} />
+              <ScheduleSection doctorUuid={selected} />
+            </div>
+          )}
+        </>
+      )}
+    </div>
+  );
+}
+
+export default function ClinicAppointmentSettingsPage() {
+  return (
+    <SettingsLayout active="appointment">
+      <ClinicAppointmentSettingsContent />
+    </SettingsLayout>
+  );
+}