Allow explicit multi-branch practitioner assignment for telemedicine.

Replace optional “All branches” with required branch checkboxes; doctors may switch only among assigned sites, never org-wide by default.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Http/Controllers/Care/Concerns/ScopesToAccount.php

@@ -58,12 +58,20 @@ trait ScopesToAccount
 
     protected function scopeToBranch(Request $request, Builder $query, string $column = 'branch_id'): Builder
     {
-        $branchId = app(OrganizationResolver::class)->branchScope($this->member($request));
+        $allowed = app(OrganizationResolver::class)->allowedBranchIds($this->member($request));
 
-        if ($branchId !== null) {
-            $query->where($column, $branchId);
+        if ($allowed !== null) {
+            $query->whereIn($column, $allowed !== [] ? $allowed : [0]);
         }
 
         return $query;
     }
+
+    protected function authorizeBranch(Request $request, ?int $branchId): void
+    {
+        abort_unless(
+            app(OrganizationResolver::class)->mayAccessBranch($this->member($request), $branchId),
+            404,
+        );
+    }
 }