Add hiring, AI parser+admin, OTP auth, employer dashboard, profit-share pay

- Hiring (استخدام) listings: JobOpening + /Jobs browse/detail + home section
- Heuristic Persian listing-parser + admin queue (/Admin) → publish shift/job
- Phone-OTP cookie auth + visitor-history linking + profile; Admin role gate
- Employer side: self-serve facility registration, dashboard, post/manage shifts & jobs, applicants list with contact
- Compensation models: fixed / hourly / profit-share (درصدی) / negotiable / choice (به انتخاب شما); SharePercent + JalaliDate.PayLabel; parser + filter

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/JobsMedical.Web/Services/AuthHelper.cs

@@ -0,0 +1,23 @@
+using System.Security.Claims;
+using JobsMedical.Web.Models;
+using Microsoft.AspNetCore.Authentication.Cookies;
+
+namespace JobsMedical.Web.Services;
+
+/// <summary>Builds the cookie principal for a user. Shared by login and by role changes
+/// (e.g. when a user registers a facility and becomes a FacilityAdmin mid-session).</summary>
+public static class AuthHelper
+{
+    public static ClaimsPrincipal BuildPrincipal(User user)
+    {
+        var claims = new List<Claim>
+        {
+            new(ClaimTypes.NameIdentifier, user.Id.ToString()),
+            new(ClaimTypes.MobilePhone, user.Phone),
+            new(ClaimTypes.Name, user.FullName ?? user.Phone),
+            new(ClaimTypes.Role, user.Role.ToString()),
+        };
+        var identity = new ClaimsIdentity(claims, CookieAuthenticationDefaults.AuthenticationScheme);
+        return new ClaimsPrincipal(identity);
+    }
+}