Embedding Zero Trust in Hospital Application Development: A Blueprint for Security-First Patient Care