fix: QA 第二轮修复 — PatientDetail 重构/测试覆盖/id_number 列宽/小程序 URL 规范化

- refactor(web): PatientDetail.tsx 拆分为 4 个子组件(737→334行)
- refactor(web): 提取 usePaginatedData hook 消除重复分页状态
- feat(db): patient.id_number varchar(20)→varchar(255) 容纳加密值
- test(health): 添加预约模块集成测试(创建/列表/租户隔离)
- test(plugin): 添加 6 个 SQL 注入 sanitize 测试
- fix(miniprogram): 7 个 service 文件 URL 构建规范化(params 对象)
- fix(miniprogram): 跨平台字段名对齐(birth_date/start_time/end_time)

crates/erp-server/migration/src/lib.rs

@@ -48,6 +48,7 @@ mod m20260424_000045_health_indexes;
 mod m20260424_000046_health_constraints_fix;
 mod m20260424_000047_health_index_fix;
 mod m20260425_000048_add_patient_id_number_hash;
+mod m20260425_000049_widen_patient_id_number;
 
 pub struct Migrator;
 
@@ -103,6 +104,7 @@ impl MigratorTrait for Migrator {
             Box::new(m20260424_000046_health_constraints_fix::Migration),
             Box::new(m20260424_000047_health_index_fix::Migration),
             Box::new(m20260425_000048_add_patient_id_number_hash::Migration),
+            Box::new(m20260425_000049_widen_patient_id_number::Migration),
         ]
     }
 }

crates/erp-server/migration/src/m20260425_000049_widen_patient_id_number.rs

@@ -0,0 +1,51 @@
+use sea_orm_migration::prelude::*;
+
+pub struct Migration;
+
+impl MigrationName for Migration {
+    fn name(&self) -> &str {
+        "m20260425_000049_widen_patient_id_number"
+    }
+}
+
+#[async_trait::async_trait]
+impl MigrationTrait for Migration {
+    async fn up(&self, manager: &SchemaManager) -> Result<(), DbErr> {
+        let conn = manager.get_connection();
+
+        // 先删除依赖 id_number 列的唯一索引
+        conn.execute_unprepared("DROP INDEX IF EXISTS idx_patient_tenant_id_number")
+            .await?;
+
+        // 加宽 id_number 列：varchar(20) → varchar(255)，容纳 AES-256-GCM 加密值（~88 字符）
+        conn.execute_unprepared(
+            "ALTER TABLE patient ALTER COLUMN id_number TYPE varchar(255)",
+        )
+        .await?;
+
+        // 重建唯一索引（partial，排除软删除和空值）
+        conn.execute_unprepared(
+            "CREATE UNIQUE INDEX idx_patient_tenant_id_number ON patient (tenant_id, id_number) WHERE deleted_at IS NULL AND id_number IS NOT NULL",
+        ).await?;
+
+        Ok(())
+    }
+
+    async fn down(&self, manager: &SchemaManager) -> Result<(), DbErr> {
+        let conn = manager.get_connection();
+
+        conn.execute_unprepared("DROP INDEX IF EXISTS idx_patient_tenant_id_number")
+            .await?;
+
+        conn.execute_unprepared(
+            "ALTER TABLE patient ALTER COLUMN id_number TYPE varchar(20)",
+        )
+        .await?;
+
+        conn.execute_unprepared(
+            "CREATE UNIQUE INDEX idx_patient_tenant_id_number ON patient (tenant_id, id_number) WHERE deleted_at IS NULL AND id_number IS NOT NULL",
+        ).await?;
+
+        Ok(())
+    }
+}