hamedandClaude Opus 4.8
11bbc4e343
The new booking-locations endpoint is consumed by the public site without a token, but it was missing from both the public_endpoints firewall pattern and access_control, so every call returned 401 ERR_AUTH_001. Verified against the dev data: the endpoint now returns both contexts for the test doctor (clinic in service mode, personal practice in slot mode), ordered by earliest free slot. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>