fix(health): 精准审计修复 6 个真实问题 — 安全/一致性/性能

P0: consultation handler sender_role 从请求体移除，改为服务端推导（防伪造）
P1: 所有软删除操作统一使用 check_version 乐观锁（6个函数）
P1: 修复 health_trend 索引缺少 tenant_id 前导列 + follow_up_record 补 (tenant_id, executed_date) 索引
P2: Decimal->f64 使用 ToPrimitive::to_f64 替代脆弱的 to_string().parse()
P2: 预约取消释放槽位+状态更新包裹进同一事务

crates/erp-health/src/handler/health_data_handler.rs

@@ -34,6 +34,11 @@ pub struct GenerateTrendReq {
     pub period_end: chrono::NaiveDate,
 }
 
+#[derive(Debug, serde::Deserialize, utoipa::ToSchema)]
+pub struct DeleteWithVersion {
+    pub version: i32,
+}
+
 #[derive(Debug, serde::Deserialize, utoipa::ToSchema)]
 pub struct UpdateWithVersion<T> {
     pub data: T,
@@ -104,13 +109,14 @@ pub async fn delete_vital_signs<S>(
     State(state): State<HealthState>,
     Extension(ctx): Extension<TenantContext>,
     Path((_patient_id, vid)): Path<(Uuid, Uuid)>,
+    Json(req): Json<DeleteWithVersion>,
 ) -> Result<Json<ApiResponse<()>>, AppError>
 where
     HealthState: FromRef<S>,
     S: Clone + Send + Sync + 'static,
 {
     require_permission(&ctx, "health.health-data.manage")?;
-    health_data_service::delete_vital_signs(&state, ctx.tenant_id, vid, Some(ctx.user_id)).await?;
+    health_data_service::delete_vital_signs(&state, ctx.tenant_id, vid, Some(ctx.user_id), req.version).await?;
     Ok(Json(ApiResponse::ok(())))
 }
 
@@ -178,13 +184,14 @@ pub async fn delete_lab_report<S>(
     State(state): State<HealthState>,
     Extension(ctx): Extension<TenantContext>,
     Path((_patient_id, rid)): Path<(Uuid, Uuid)>,
+    Json(req): Json<DeleteWithVersion>,
 ) -> Result<Json<ApiResponse<()>>, AppError>
 where
     HealthState: FromRef<S>,
     S: Clone + Send + Sync + 'static,
 {
     require_permission(&ctx, "health.health-data.manage")?;
-    health_data_service::delete_lab_report(&state, ctx.tenant_id, rid, Some(ctx.user_id)).await?;
+    health_data_service::delete_lab_report(&state, ctx.tenant_id, rid, Some(ctx.user_id), req.version).await?;
     Ok(Json(ApiResponse::ok(())))
 }
 
@@ -252,13 +259,14 @@ pub async fn delete_health_record<S>(
     State(state): State<HealthState>,
     Extension(ctx): Extension<TenantContext>,
     Path((_patient_id, rid)): Path<(Uuid, Uuid)>,
+    Json(req): Json<DeleteWithVersion>,
 ) -> Result<Json<ApiResponse<()>>, AppError>
 where
     HealthState: FromRef<S>,
     S: Clone + Send + Sync + 'static,
 {
     require_permission(&ctx, "health.health-data.manage")?;
-    health_data_service::delete_health_record(&state, ctx.tenant_id, rid, Some(ctx.user_id)).await?;
+    health_data_service::delete_health_record(&state, ctx.tenant_id, rid, Some(ctx.user_id), req.version).await?;
     Ok(Json(ApiResponse::ok(())))
 }