fix(facilities): secure facility get endpoints

feat: add staff onboarding, password setup and welcome emails

refactor: replace HEALTH_WORKER with FACILITY roles

fix(services): add facility validation and clean up code

feat(facilities): add QR facility linking workflow

feat: add core maternal health backend features