fix(miniprogram+auth): 二次审计修复 — 3 HIGH + 2 MEDIUM

HIGH:
- wechat_users 迁移补充 created_by/updated_by/version 标准字段
- Entity 同步更新，bind_phone 创建记录时填充新字段
- appointment create 移除 schedule_id 空字符串，改为可选
- appointment list 用 useRef 替代 useCallback 的 loading 依赖，消除 stale closure

MEDIUM:
- report 页 patientId 从顶层读取改为 useDidShow 内动态获取，就诊人切换后正确刷新
- profile/reports 同上修复
- profile/followups 移除 useDidShow 非法的第二参数

apps/miniprogram/src/services/appointment.ts

@@ -33,7 +33,7 @@ export async function listAppointments(page = 1) {
 export async function createAppointment(data: {
   patient_id: string;
   doctor_id: string;
-  schedule_id: string;
+  schedule_id?: string;
   appointment_date: string;
   time_slot: string;
   reason?: string;