fix: audit issues - field mismatches, missing endpoints, data loss

- Report frontends: createdAt→uploadedAt field alignment with backend
- Dashboard: fix pending reports endpoint /api/reports/pending
- FollowUpListPage: status labels upcoming/cancelled
- MedicationController: add PUT/DELETE endpoints + service methods
- FollowUpController: add DELETE endpoint, Notes to CreateRequest
- Auth: UpdateProfileRequest includes doctor fields
- Auth: login restores soft-deleted users instead of crashing

backend/src/HealthManager.WebApi/Controllers/AuthController.cs

@@ -29,14 +29,28 @@ public class AuthController(
         {
             // Demo: auto-register new users
             var db = HttpContext.RequestServices.GetRequiredService<Infrastructure.Data.AppDbContext>();
-            user = new User
+
+            // Check if this phone was soft-deleted — restore instead of creating duplicate
+            var deleted = await db.Users.IgnoreQueryFilters()
+                .FirstOrDefaultAsync(u => u.Phone == request.Phone && u.IsDeleted);
+            if (deleted != null)
             {
-                Phone = request.Phone,
-                Name = "用户" + request.Phone[^4..],
-                Role = "patient",
-                PasswordHash = AuthService.HashPassword("demo123"),
-            };
-            db.Users.Add(user);
+                deleted.IsDeleted = false;
+                deleted.DeletedAt = null;
+                deleted.UpdatedAt = DateTime.UtcNow;
+                user = deleted;
+            }
+            else
+            {
+                user = new User
+                {
+                    Phone = request.Phone,
+                    Name = "用户" + request.Phone[^4..],
+                    Role = "patient",
+                    PasswordHash = AuthService.HashPassword("demo123"),
+                };
+                db.Users.Add(user);
+            }
             await db.SaveChangesAsync();
         }
 
@@ -121,6 +135,10 @@ public class AuthController(
         if (request.HeightCm.HasValue) user.HeightCm = request.HeightCm;
         if (request.WeightKg.HasValue) user.WeightKg = request.WeightKg;
         if (request.MedicalHistory != null) user.MedicalHistory = request.MedicalHistory;
+        if (request.Department != null) user.Department = request.Department;
+        if (request.Title != null) user.Title = request.Title;
+        if (request.Introduction != null) user.Introduction = request.Introduction;
+        if (request.Specialty != null) user.Specialty = request.Specialty;
         user.UpdatedAt = DateTime.UtcNow;
 
         await db.SaveChangesAsync();