fix: resolve critical bugs and security issues across the project

Security:
- Disable SSL verification only in development (lib/req.js)
- Wrap all JSON.parse(cookie) calls in try-catch via safeJsonParse utility
- Sanitize dangerouslySetInnerHTML in blog/clinic with sanitizeHtml utility
- Fix open redirect in payment page — validate URL origin before redirect
- Fix cookie cleanup on 401 — use js-cookie with correct domain scope

Performance:
- Wrap ItemDoctor with React.memo to prevent unnecessary re-renders
- Replace <img> with Next.js <Image> in blog Caption component

Functionality:
- Fix memory leak in Recode.js — store intervals in refs, cleanup on unmount
- Add null guard on retryIcon.current before classList manipulation
- Fix getParsedUserInfo in helper to handle malformed cookie gracefully

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

components/appointment/index.js

@@ -4,6 +4,7 @@ import { useEffect, useState } from "react";
 import { request } from "@/services/response";
 import Cookies from "js-cookie";
 import Container from "./Container";
+import { safeJsonParse } from "@/lib/sanitize";
 
 const defaultData = {
   phone: { value: "", isEdit: false },
@@ -39,7 +40,7 @@ function AppointmentPage({ doctor, disabledDates, matchedCity }) {
       setIsLoading(true);
 
       const userInfo = Cookies.get("userInfo");
-      const parsedData = userInfo && JSON.parse(userInfo);
+      const parsedData = safeJsonParse(userInfo);
       const usernameFromCookie = parsedData?.username || "";
 
       // ابتدا شماره موبایل را از Cookie ست می‌کنیم
@@ -112,7 +113,7 @@ function AppointmentPage({ doctor, disabledDates, matchedCity }) {
     const refetchUserData = async () => {
       if (step === 3) {
         const userInfo = Cookies.get("userInfo");
-        const parsedData = userInfo && JSON.parse(userInfo);
+        const parsedData = safeJsonParse(userInfo);
         const usernameFromCookie = parsedData?.username || "";
 
         if (userInfo && parsedData && !data.uuid) {