chore(release): v1.4.28

Bug-fix and consistency follow-through after the v1.4.27 mobile sweep.
The headline is a tighter dashboard and insights surface: six widgets
retire from code entirely (GLP-1 tile, dashboard `<DrugLevelChart>`
mount, GLP-1 detail-page intake history + inventory, the
`<InsightAdvisorCard>` block and its regeneration affordance, the
weekly-report route), four broken edges close (workout-edit duplicate-
timestamp 409, BD-Zielbereich tile rebuilt on the shared
`<TrendCard>` primitive, `/insights/puls` chart timeout fallback,
sticky tab-strip scroll lock), and one consistency contract lands per
maintainer directive: every medication-list row, every medication-
detail section header, every trend tile, every Coach launch glyph,
every chart-height contract reads on one shape. The HealthScore card
grows to fill its column, gains an accessible `?` tooltip explaining
the delta, and drops the placeholder "Wochenbericht erstellen"
button. iOS contracts are intact; the only `/api/*` evolution is
additive (the `aggregate=monthly` grain on `/api/measurements` and an
internal-only `/api/internal/web-vitals` beacon route).

docs/api/openapi.yaml

@@ -778,13 +778,6 @@ components:
               type: string
             type: object
           type: array
-        weeklyReport:
-          anyOf:
-            - additionalProperties: {}
-              propertyNames:
-                type: string
-              type: object
-            - type: "null"
       required:
         - summary
         - recommendations
@@ -2203,7 +2196,7 @@ paths:
           name: limit
           schema:
             default: 100
-            maximum: 500
+            maximum: 5000
             minimum: 1
             type: integer
         - in: query
@@ -2231,6 +2224,15 @@ paths:
               - asc
               - desc
             type: string
+        - in: query
+          name: aggregate
+          schema:
+            enum:
+              - raw
+              - daily
+              - weekly
+              - monthly
+            type: string
       responses:
         "200":
           content: