fix(health): 精准审计修复 6 个真实问题 — 安全/一致性/性能

P0: consultation handler sender_role 从请求体移除，改为服务端推导（防伪造）
P1: 所有软删除操作统一使用 check_version 乐观锁（6个函数）
P1: 修复 health_trend 索引缺少 tenant_id 前导列 + follow_up_record 补 (tenant_id, executed_date) 索引
P2: Decimal->f64 使用 ToPrimitive::to_f64 替代脆弱的 to_string().parse()
P2: 预约取消释放槽位+状态更新包裹进同一事务

crates/erp-health/src/handler/doctor_handler.rs

@@ -28,6 +28,11 @@ pub struct UpdateDoctorWithVersion {
     pub version: i32,
 }
 
+#[derive(Debug, serde::Deserialize, utoipa::ToSchema)]
+pub struct DeleteWithVersion {
+    pub version: i32,
+}
+
 pub async fn list_doctors<S>(
     State(state): State<HealthState>,
     Extension(ctx): Extension<TenantContext>,
@@ -100,12 +105,13 @@ pub async fn delete_doctor<S>(
     State(state): State<HealthState>,
     Extension(ctx): Extension<TenantContext>,
     Path(id): Path<Uuid>,
+    Json(req): Json<DeleteWithVersion>,
 ) -> Result<Json<ApiResponse<()>>, AppError>
 where
     HealthState: FromRef<S>,
     S: Clone + Send + Sync + 'static,
 {
     require_permission(&ctx, "health.doctor.manage")?;
-    doctor_service::delete_doctor(&state, ctx.tenant_id, id, Some(ctx.user_id)).await?;
+    doctor_service::delete_doctor(&state, ctx.tenant_id, id, Some(ctx.user_id), req.version).await?;
     Ok(Json(ApiResponse::ok(())))
 }