fix(mp): T40 UI 审计修复 — 28 项设计系统合规 + 安全加固 + 讨论记录

T40 UI 审计修复（60 页面全覆盖）:
- 新增 $acc-d/$wrn-d 渐变中间色变量，修复首页轮播渐变硬编码
- 替换 8 处裸 white 为 $white 设计变量（5 个 SCSS 文件）
- 修复 7 处触摸目标 40/44px → 48px（健康/消息/咨询/预约/首页）
- 3 页面新增 Loading 状态（体征录入/个人中心/就诊人添加）
- statusTag 移除硬编码布局值，改用 SCSS mixin 控制
- 医生端 14 页面架构 Hook 层补充（useThrottledDidShow 替换 useEffect）
- 移除 action-inbox 未使用 import

安全 P0 修复:
- JWT 中间件加固：token 类型校验 + 过期预检 + 类型别名简化
- 速率限制增强：滑动窗口 + 暴力破解防护
- analytics handler 错误处理完善

文档:
- T40 审计报告（24 PASS / 36 PASS_WITH_ISSUES / 0 NEEDS_WORK）
- 5 份 DevTools/性能审计讨论记录
- wiki 症状导航 + 小程序章节更新

apps/miniprogram/src/pages/mall/index.tsx

@@ -1,6 +1,7 @@
 import React, { useState, useCallback, useRef } from 'react';
 import { View, Text } from '@tarojs/components';
-import Taro, { useDidShow, useReachBottom, usePullDownRefresh } from '@tarojs/taro';
+import Taro, { useReachBottom, usePullDownRefresh } from '@tarojs/taro';
+import { useThrottledDidShow } from '@/hooks/useThrottledDidShow';
 import { listProducts } from '../../services/points';
 import type { PointsProduct } from '../../services/points';
 import { useAuthStore } from '../../stores/auth';
@@ -23,8 +24,12 @@ const TYPE_BG: Record<string, string> = {
 };
 
 export default function Mall() {
-  const { currentPatient, loadPatients } = useAuthStore();
-  const { account, checkinStatus, refresh: refreshPoints, doCheckin } = usePointsStore();
+  const currentPatient = useAuthStore((s) => s.currentPatient);
+  const loadPatients = useAuthStore((s) => s.loadPatients);
+  const account = usePointsStore((s) => s.account);
+  const checkinStatus = usePointsStore((s) => s.checkinStatus);
+  const refreshPoints = usePointsStore((s) => s.refresh);
+  const doCheckin = usePointsStore((s) => s.doCheckin);
   const [products, setProducts] = useState<PointsProduct[]>([]);
   const [productType, setProductType] = useState('');
   const [page, setPage] = useState(1);
@@ -82,10 +87,10 @@ export default function Mall() {
     [currentPatient, loadPatients, refreshPoints, fetchProducts, productType],
   );
 
-  useDidShow(() => {
+  useThrottledDidShow(() => {
     Taro.setNavigationBarTitle({ title: '积分商城' });
     loadAll();
-  });
+  }, 10000);
 
   usePullDownRefresh(() => {
     loadAll().finally(() => {