Update Patient Watchlist

Adds or removes a user to the authenticated patient's watchlist using the unique id of the user and an action flag. The isAdd field in the request body dictates the operation: true adds the staff member to the watchlist, and false removes them.