fix: resolve critical bugs and security issues across the project

- Fix GPS map links always sending literal "latitude"/"longitude" strings
  instead of actual coordinates in openLocation/Content.js
- Add api.clinic-pro.ir to next.config.js remotePatterns so production
  images load correctly
- Fix appointment page: await params and getStateInfo (Next.js 15 pattern)
- Enable 401 handling in api.js: clear cookies and redirect to /login
- Move OAuth client_secret to server-side API routes (/api/auth/token,
  /api/auth/refresh) so it is never bundled into client-side JavaScript
- Update SendReq, SubmitData, ButtonSendData to call API routes instead
  of directly sending client_secret from the browser
- Update docker-compose.yml to use server-only CLIENT_SECRET env var
- Remove debug console.log from clinic doctors list component

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/component/openLocation/Content.js

@@ -8,27 +8,27 @@ function Content({ data, onClose }) {
     {
       src: "/assets/images/snapp.png",
       name: "snapp",
-      url: `https://snapp.ir/route?lat=${"latitude"}&lng=${"longitude"}`,
+      url: `https://snapp.ir/route?lat=${latitude}&lng=${longitude}`,
     },
     {
       src: "/assets/images/tapsi.png",
       name: "tapsi",
-      url: `https://tapsi.ir/route?lat=${"latitude"}&lng=${"longitude"}`,
+      url: `https://tapsi.ir/route?lat=${latitude}&lng=${longitude}`,
     },
     {
       src: "/assets/images/maps.png",
       name: "maps",
-      url: `https://www.google.com/maps/dir/?api=1&destination=${"latitude"},${"longitude"}`,
+      url: `https://www.google.com/maps/dir/?api=1&destination=${latitude},${longitude}`,
     },
     {
       src: "/assets/images/balad.png",
       name: "balad",
-      url: `https://balad.ir/map?lat=${"latitude"}&lng=${"longitude"}`,
+      url: `https://balad.ir/map?lat=${latitude}&lng=${longitude}`,
     },
     {
       src: "/assets/images/waze.png",
       name: "waze",
-      url: `https://waze.com/ul?ll=${"latitude"},${"longitude"}&navigate=yes`,
+      url: `https://waze.com/ul?ll=${latitude},${longitude}&navigate=yes`,
     },
   ];