feat(web): 健康模块 13 页面按钮级权限控制 — AuthButton 包装

使用 AuthButton 声明式组件包装健康模块全部操作按钮：
- health.patient.manage: PatientList/PatientDetail/PatientTagManage
- health.appointment.manage: AppointmentList
- health.doctor.manage: DoctorList/DoctorSchedule
- health.follow-up.manage: FollowUpTaskList
- health.consultation.manage: ConsultationList/ConsultationDetail
- health.points.manage: OfflineEventList/PointsProductList/PointsOrderList/PointsRuleList

apps/web/src/pages/health/PointsOrderList.tsx

@@ -23,6 +23,7 @@ import {
   type PointsOrder,
 } from '../../api/health/points';
 import { patientApi } from '../../api/health/patients';
+import { AuthButton } from '../../components/AuthButton';
 
 /** 订单状态映射 */
 const STATUS_MAP: Record<string, { text: string; color: string }> = {
@@ -228,13 +229,15 @@ export default function PointsOrderList() {
           </Space>
         </Col>
         <Col>
-          <Button
-            type="primary"
-            icon={<CheckCircleOutlined />}
-            onClick={openVerifyModal}
-          >
-            核销订单
-          </Button>
+          <AuthButton code="health.points.manage">
+            <Button
+              type="primary"
+              icon={<CheckCircleOutlined />}
+              onClick={openVerifyModal}
+            >
+              核销订单
+            </Button>
+          </AuthButton>
         </Col>
       </Row>