v1.13.0

Added

• Returning-client pet verification: adding a new pet to an existing account now asks for the last 4 digits of the phone the clinic has on file, checked server-side. No owner name/phone is ever shown or pre-filled. Booking for a pet already on the account, and brand-new signups, are unchanged.

Security

• The ownership check keys off the server-side email match, not a client-supplied flag, and fails closed when there's no phone on file — a stranger who only knows an email can't attach a pet to someone's record.