Record physician code selections (sync, best-effort; production only)

Synchronous, best-effort capture -- never routed through Temporal in production. This operation is not available in sandbox mode. The service swallows any bookkeeping failure into {accepted: false} so a physician mid-encounter is never blocked; a successful capture returns {accepted: true, analysis_id, recorded}.