refinement phase 3

dev/contracts/domains/identity-profiles.md

@@ -85,3 +85,16 @@ segments are snake_case; responses use the standard `OperationResult`→`ApiResu
 
 ## Changelog
 - b3 — initial contract (nurse/customer profiles, patients, nurse bank accounts + ownership inquiry).
+
+---
+
+## Refinement phase 3 additions (REQ-005/006/007)
+
+- **`PatientDto` + create/update** gain `relation` (`parent|spouse|child|self`, nullable) and `conditions`
+  (`string[]` of stable codes; empty, never null). Stored as a nullable code + a JSON array column.
+- **`NurseProfileDto`** and **`CustomerProfileDto`** gain `avatarUrl` (nullable). `CustomerProfileDto` also
+  gains `preferredLanguage` (nullable); the customer `upsert` body now accepts `firstName`/`lastName`
+  (persisted on the base `users` row) and `preferredLanguage`.
+- **Avatar upload (multipart):** `POST api/v1/nurse_profiles/avatar` and
+  `POST api/v1/customer_profiles/avatar` — `multipart/form-data` field `file` (JPEG/PNG/WebP, ≤ 5 MB),
+  stored via `IObjectStorage`, returns `{ url }` and persists it on the profile.