Everything the portal shows a physician about their own account.

Until now the only self-scoped write on this whole API was the tutorial state, and there was no way for a doctor to see what we hold about them, let alone correct a phone number. The credential fields come back editable: false rather than being withheld: someone should be able to read what they submitted and see plainly which parts are settled.