feat: unify wallet with real payment methods, full transaction transparency, pay-session-from-wallet

Address wallet feedback: use the clinic's real payment infrastructure,
redesign the tab to match the admin panel, and make every wallet movement
fully auditable.

Backend:
- WalletTransaction: add createdBy (acting user) + createdByName, payment_method,
  reference, status; toArray exposes them (migration Version20260716083939).
- WalletService (Settlement): balance/charge/withdraw + settleSessionFromWallet,
  records actor/method/reason; insufficient balance throws ERR_WALLET_INSUFFICIENT.
- PatientController: charge/withdraw delegate to WalletService and accept
  payment_method/reference; PATCH /session/{uuid} with payment_method=wallet
  debits the patient's final share from the wallet (reference=session:{uuid}).
- docs/api/patient.md updated.

Frontend:
- Wallet modal redesigned to panel style (no gradient); payment method now uses
  the clinic's real bank accounts + POS devices (usePaymentMethods) plus cash.
- Wallet tab: panel balance card + DataTable ledger with columns مبلغ/نوع/روش/
  دلیل/ثبت‌کننده/تاریخ/ساعت/وضعیت + همه/واریزی/برداشت filters.
- Session card «تکمیل پرداخت» opens a payment-method chooser incl. کیف پول.

Tests: backend transparency + session-from-wallet (success/insufficient/cash);
frontend modal (real methods, toman→rials) + wallet tab + settle chooser.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

tests/Patient/PatientFinancialsTest.php

@@ -155,6 +155,31 @@ class PatientFinancialsTest extends ApiTestCase
         self::assertSame(422, $this->responseCode());
     }
 
+    public function testChargeRecordsActingUserPaymentMethodAndStatus(): void
+    {
+        [$owner, $record] = $this->recordFor();
+
+        $res = $this->authJson('POST', '/api/v1/patient/' . $record->getUuid() . '/wallet/charge', $owner, [
+            'amount_rials' => 300000, 'payment_method' => 'card',
+        ]);
+        self::assertSame(201, $this->responseCode());
+        $txn = $res['data']['transaction'];
+        self::assertSame('card', $txn['payment_method']);
+        self::assertSame('confirmed', $txn['status']);
+        // بدون پروفایل → نامِ ثبت‌کننده = شماره موبایلِ کاربرِ عامل
+        self::assertSame($owner->getMobileNumber(), $txn['created_by_name']);
+    }
+
+    public function testChargeIgnoresUnknownPaymentMethod(): void
+    {
+        [$owner, $record] = $this->recordFor();
+        $res = $this->authJson('POST', '/api/v1/patient/' . $record->getUuid() . '/wallet/charge', $owner, [
+            'amount_rials' => 100000, 'payment_method' => 'bitcoin',
+        ]);
+        self::assertSame(201, $this->responseCode());
+        self::assertNull($res['data']['transaction']['payment_method']);
+    }
+
     public function testFinancialsAreOwnershipScoped(): void
     {
         [, $record] = $this->recordFor();