fix(facilities): secure facility get endpoints

feat: add staff onboarding, password setup and welcome emails

refactor: replace HEALTH_WORKER with FACILITY roles

feat(facilities): add QR facility linking workflow

feat: add core maternal health backend features