Privacy-First AI Systems for Healthcare: From Foundations to Agents