feat: harden auth and study workflows

- replace plaintext login and unlock requests with RSA-OAEP/AES-GCM encrypted payloads

- add login challenge replay protection, production RSA key validation, and auth tests

- wire compose to environment-driven dev/prod settings without committing local secrets

- update setup-config smoke scripts and Postman docs for encrypted login

- add visit schedule migrations/tests and update study/subject setup workflows

frontend/src/locales/zh-CN.ts

@@ -121,11 +121,12 @@ export const TEXT = {
       screeningDate: "筛选日期",
       consentDate: "知情日期",
       enrollmentDate: "入组日期",
+      baselineDate: "基线/治疗日期",
       completionDate: "完成日期",
       dropReason: "退出原因",
       recordDate: "日期",
       content: "内容",
-      visitCode: "访视编号",
+      visitCode: "访视",
       plannedDate: "计划访视",
       actualDate: "实际访视",
       windowStart: "窗口开始",