feat(ocr, risk): add patient OCR and risk assessment

refactor(appointments): switch to facility ID

feat: add patient update API and improve admin scripts

refactor: replace HEALTH_WORKER with FACILITY roles

fix(services): add facility validation and clean up code

feat: add facility-scoped access and appointment status

feat: add ANC visit functionality and improve patient/referral workflows

feat: add core maternal health backend features