Batch create/update patients

Create or update multiple patients in a single request. New patients are created all-or-nothing. Existing patients (matched by phone, email, or demographics) get non-null safe fields merged — identity fields are never overwritten.