fix(ui): one name per measure across the pilot's screens, and patient links under /patients (#648)

[Taleef7]

Closes #648.

I rechecked every surface on the live Maui sandbox first (details on the issue). The Cases cards, case detail and the attributed-list report were already right. This PR fixes the rest.

One label per measure

• The roster's "Scoped to" line read MIPS 113 · CMS130 · cms130, with the id twice and no name. It now uses labelForId.
• Every measure picker uses the card's long form, MIPS 113 · CMS130 · Colorectal Cancer Screening:
  • Cases, Orders and Campaigns;
  • the hierarchy;
  • groups (the checkboxes and the table);
  • Admin's waiver filters.
• The campaign history and a person's history use the same label.
• A measure with no published identity (the TWH occupational ones) keeps its plain name.
• Work list gap chips show the short form, MIPS 113 · CMS130 (new shortLabelFor), so a row of three still fits its cell. The full label, status and next action are the chip's tooltip and accessible name, and the visible text is where that name starts (WCAG 2.5.3).

Patient links

• Subject links come from one helper, subjectPath(id): /patients/<id> on a patient deployment, /employees/<id> otherwise. It is used at 10 link sites.
• The new /patients/[externalId] route serves the same page. /employees/<id> still opens, so bookmarks and TWH are unchanged.
• The Maui e2e selectors now look for /patients/; CI builds that stack with NEXT_PUBLIC_SUBJECT_TERM=patient.
• The profile's API call now encodes the id.

Left as they are

• The Runs list: engineering only, and its name can be a scope label.
• Admin's waiver cards and delivery log: TWH occupational measures, which have no identity.

Tests

New or changed:

• the roster banner, and the Cases, Orders and hierarchy option names;
• Work list chips: short text, long accessible name, and plain name when there is no identity;
• the People history label, and the People and Cases links on the patient term;
• lib/subject-path.test.ts: both terms, plus encoding.

13 mutations, all caught. Full frontend suite (585), lint and build pass locally; the build lists /patients/[externalId].