fix: 修复测试发现的 7 个问题 + 全 workspace clippy 清零

功能修复：
1. 患者创建空名称验证：后端添加 name.trim().is_empty() 检查
2. 仪表盘统计容错：单个查询失败返回零值而非 500
3. FHIR 路由修复：从 /fhir 移到 /api/v1/fhir 保持一致
4. 冻结模块后端中间件：新增 frozen_module_middleware 拦截冻结路径
5. 积分端点权限码：health.health-data.list → health.points.list
6. 角色权限迁移：护士补充 devices.list，运营补充 points.list/manage
7. 测试结果文档：R01-R05 角色测试 + T00/T10 结果归档

Clippy 全 workspace 清零（14→0 errors）：
- erp-core: 修复 empty doc line、collapsible if、redundant closure 等 9 处
- erp-health: 修复 too_many_arguments、unused var、unnecessary parens 等 58 处
- erp-ai: 修复 dead_code、unused import 等 11 处
- erp-plugin: 修复 too_many_arguments、wildcard pattern 等 11 处
- erp-server-migration: 修复 enum_variant_names 5 处
- erp-auth/config/workflow/message: 各 1-3 处

工程改进：
- lint-staged 配置迁移到 .lintstagedrc.js（函数式避免文件列表传给 clippy）
- cargo fmt 统一格式化

crates/erp-ai/src/sanitization/mod.rs

@@ -10,6 +10,12 @@ use crate::error::{AiError, AiResult};
 /// 此服务做二次检查和安全约束注入
 pub struct SanitizationService;
 
+impl Default for SanitizationService {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
 impl SanitizationService {
     pub fn new() -> Self {
         Self
@@ -77,8 +83,8 @@ impl SanitizationService {
 mod tests {
     use super::*;
     use erp_core::health_provider::{
-        HealthReportDto, LabReportDto, PatientSummaryDto, ReportSectionDto,
-        VitalSignDto, LabItemDto,
+        HealthReportDto, LabItemDto, LabReportDto, PatientSummaryDto, ReportSectionDto,
+        VitalSignDto,
     };
 
     fn sanitizer() -> SanitizationService {
@@ -172,13 +178,24 @@ mod tests {
     #[test]
     fn verify_no_pii_detects_all_pii_keys() {
         let svc = sanitizer();
-        let pii_keys = ["name", "phone", "id_number", "address", "birth_date", "email"];
+        let pii_keys = [
+            "name",
+            "phone",
+            "id_number",
+            "address",
+            "birth_date",
+            "email",
+        ];
         for key in pii_keys {
             let mut report_json = serde_json::to_value(&clean_lab_report()).unwrap();
             report_json[key] = serde_json::json!("test");
             let report: LabReportDto = serde_json::from_value(report_json).unwrap();
             let result = svc.sanitize_lab_report(&report);
-            assert!(result.is_ok(), "LabReportDto 不包含 {} 字段，反序列化时被丢弃", key);
+            assert!(
+                result.is_ok(),
+                "LabReportDto 不包含 {} 字段，反序列化时被丢弃",
+                key
+            );
         }
     }
 
@@ -188,9 +205,19 @@ mod tests {
     fn dto_serialization_contains_no_pii() {
         let report = clean_lab_report();
         let val = serde_json::to_value(&report).unwrap();
-        for key in &["name", "phone", "id_number", "address", "birth_date", "email"] {
-            assert!(!val.as_object().unwrap().contains_key(*key),
-                "LabReportDto 不应包含 PII 字段: {}", key);
+        for key in &[
+            "name",
+            "phone",
+            "id_number",
+            "address",
+            "birth_date",
+            "email",
+        ] {
+            assert!(
+                !val.as_object().unwrap().contains_key(*key),
+                "LabReportDto 不应包含 PII 字段: {}",
+                key
+            );
         }
     }