feat(vaccinations): write the backup, wipe and rotation verdicts

- both models are backed up and claimed two-ended: an immunization
  history has no other copy once the paper Pass has been transcribed
- the document link is wiped ahead of the dose, and the dose ahead of
  the practitioner it points at with SetNull, so the audit row's
  per-model counts stay truthful
- the dose note joins ENCRYPTED_COLUMNS and the rotation walk; the batch
  code and the other structured columns stay queryable plaintext

scripts/rotate-encryption-key.ts

@@ -562,6 +562,17 @@ async function main() {
     ),
   );
 
+  // ───── v1.38.0 dose free text (Bytes column) ─────
+  // The note on an administered dose — a reaction, a sore arm. Always
+  // encrypted on write, so every non-null row rotates.
+  results.push(
+    await rotateBytesColumn(
+      "VaccinationRecord",
+      "noteEncrypted",
+      prisma.vaccinationRecord,
+    ),
+  );
+
   // ───── Inbound clinical document (Bytes column, codec-dispatched) ─────
   // The raw uploaded document. Two layouts recorded per row in
   // `contentCodec` ("base64v1" string codec | "binary2" binary codec), so