feat(branch): branch working hours and rooms on the existing address entity

Task 01 planned a new `branches` table with `doctor_addresses.branch_id` bridging
to it. That plan was wrong: the branch already exists and is called
`DoctorAddress`. It carries name, address, telephone, coordinates, city/province
FKs and an owner (`forDoctor` / `forClinic` + `type`), and the whole system
already consumes it with exactly that meaning — `WeeklySchedule.sessions[].location_id`
points at `doctor_addresses.id`, `appointment-booking-locations` calls each row a
booking location, and nine CRUD endpoints plus four admin pages manage them.
A parallel table would mean two sources of truth for one physical place and a
branch that `location_id` never references.

So no `branches` table and no duplicate branch CRUD. Only the three genuinely
missing pieces:

- `doctor_addresses.active` / `.timezone`, both NOT NULL with a default so
  existing rows need no backfill and no current behaviour changes. `active` is
  stored only — applying it to slot calculation is task 03, since touching
  `SlotCalculatorService` is off limits in this phase.
- `branch_working_hours`, keyed to `doctor_addresses.id`. Minutes from midnight
  rather than "09:00" strings so range intersection stays arithmetic. PUT
  replaces all seven days; validation of the whole week runs before any DELETE,
  so an invalid sixth day cannot wipe the five valid ones and then answer 422.
- `rooms`, with `capacity` as concurrency (a three-bed injection room is one
  resource with capacity 3, not three resources) and a deletion-guard iterator
  so tasks 02 and 07 can add reasons without editing RoomService.

`BranchWorkingHours` first registered as an aggregate child of `DoctorAddress`;
TenantSchemaCoverageTest rejected it correctly, because that root is itself
declared global. It now carries a real tenant pair instead, derived in the
constructor from the address's `type` — a total mapping, and the address is only
ever listed in its own context, so nothing is hidden wrongly.

RoomController checks ownership explicitly rather than trusting TenantFilter:
hard isolation only applies to a *chosen* context, so a doctor who had not
selected one could PATCH another clinic's room. Caught by
RoomCrudTest::testForeignRoomIsNotFound, which failed with 200 before the fix.

35 tests, 97 assertions. Slot-mode frozen contract still green.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/Doctor/Repository/DoctorAddressRepository.php

@@ -41,6 +41,65 @@ class DoctorAddressRepository extends ServiceEntityRepository
             ->getOneOrNullResult();
     }
 
+    /**
+     * آدرس‌های یک محیط با جفت (entity_type, entity_id) — همان واژگانی که Room و منابع
+     * تسک ۰۲ با آن ذخیره می‌شوند.
+     *
+     * قرینهٔ findForContext() است ولی Doctor لازم ندارد: در محیط کلینیک، آن متد
+     * پارامتر doctor را نادیده می‌گیرد و مجبور کردن فراخوان به ساختن یک Doctor
+     * الکی، همان نوع کدی است که بعداً کسی با getReference() پرش می‌کند.
+     *
+     * @return DoctorAddress[]
+     */
+    public function findForEntityPair(string $entityType, int $entityId): array
+    {
+        $qb = $this->createQueryBuilder('a');
+
+        if ($entityType === 'clinic') {
+            $qb->where('a.clinicId = :entityId')
+                ->andWhere('a.type = :type')
+                ->setParameter('type', DoctorAddress::TYPE_CLINIC);
+        } else {
+            $qb->where('IDENTITY(a.doctor) = :entityId')
+                ->andWhere('a.type = :type')
+                ->setParameter('type', DoctorAddress::TYPE_PERSONAL);
+        }
+
+        return $qb->setParameter('entityId', $entityId)
+            ->orderBy('a.id', 'ASC')
+            ->getQuery()
+            ->getResult();
+    }
+
+    /**
+     * یک آدرس با uuid، محدود به محیط داده‌شده.
+     *
+     * `doctor_addresses` جفت محیط ندارد (عمداً — در GlobalTables::ENTITIES ثبت شده)
+     * پس TenantFilter رویش اعمال نمی‌شود و `findOneBy(['uuid' => …])` آدرس محیط دیگر
+     * را هم برمی‌گرداند. هر مسیری که uuid آدرس را از request می‌گیرد باید از این
+     * متد یا از {@see \App\Branch\Service\BranchResolver} رد شود.
+     */
+    public function findByUuidForEntityPair(string $uuid, string $entityType, int $entityId): ?DoctorAddress
+    {
+        $qb = $this->createQueryBuilder('a')
+            ->where('a.uuid = :uuid')
+            ->setParameter('uuid', $uuid);
+
+        if ($entityType === 'clinic') {
+            $qb->andWhere('a.clinicId = :entityId')
+                ->andWhere('a.type = :type')
+                ->setParameter('type', DoctorAddress::TYPE_CLINIC);
+        } else {
+            $qb->andWhere('IDENTITY(a.doctor) = :entityId')
+                ->andWhere('a.type = :type')
+                ->setParameter('type', DoctorAddress::TYPE_PERSONAL);
+        }
+
+        return $qb->setParameter('entityId', $entityId)
+            ->getQuery()
+            ->getOneOrNullResult();
+    }
+
     public function findOneByClinic(int $clinicId): ?DoctorAddress
     {
         return $this->createQueryBuilder('a')