feat(health): patient_service 集成 PiiCrypto — 电话/过敏史/病史加密

- HealthState.crypto: HealthCrypto → PiiCrypto (erp-core)
- create_patient: 加密 phone/allergy/medical_history + HMAC 索引
- update_patient: 同上，同步加密
- model_to_resp_decrypted: 解密所有 Tier 1 字段
- model_to_resp (列表): Tier 1 字段返回 None
- list_patients 搜索: 新增 phone hash 精确搜索
- article handler: 适配新 list_articles 签名
- article 迁移: 添加 category_id 列
- error.rs: From<String> for HealthError
- 集成测试: HealthCrypto → PiiCrypto::dev_default()

crates/erp-health/src/error.rs

@@ -118,4 +118,10 @@ impl From<AppError> for HealthError {
     }
 }
 
+impl From<String> for HealthError {
+    fn from(err: String) -> Self {
+        HealthError::Validation(err)
+    }
+}
+
 pub type HealthResult<T> = Result<T, HealthError>;