fix(ocr): return imageUrls instead of uploadedImages in response

feat(ocr, risk): add patient OCR and risk assessment