test(labs): register the overview route in the sharing and module-gate inventories

src/__tests__/sharing-surface-guard.test.ts

@@ -847,6 +847,10 @@ const DELEGABLE_ROUTES: Record<string, DelegableEntry> = {
     domain: "labs",
     why: "One lab result of the record, fetched by id then guarded against the resolved user before anything is serialised.",
   },
+  "app/api/labs/overview/route.ts": {
+    domain: "labs",
+    why: "The Labs list's per-marker overview of the record: the newest reading of each biomarker, its count and a short trend. The same rows and the same biomarker include as `GET /api/labs`, grouped server-side; read only.",
+  },
   "app/api/biomarkers/route.ts": {
     domain: "labs",
     why: "The record's biomarker catalogue: the analytes this account tracks and the ranges it tracks them against. Adding a marker is a delegable write; the PUT and DELETE on the sibling route are refused.",
@@ -2097,8 +2101,11 @@ const ACTOR_ROUTES: Record<string, string> = {
  * v1.42 — the score-history read joins the record list and the manage
  * literal (a score's daily course, MANAGE like the derived score itself).
  * 252 -> 254.
+ *
+ * v1.42.4 -- the Labs list's per-marker overview joins the record list
+ * beside `GET /api/labs`, the rows it groups. 255 -> 256.
  */
-const FROZEN_ENTRY_COUNT = 255;
+const FROZEN_ENTRY_COUNT = 256;
 
 /**
  * The two surfaces that authenticate a Bearer token outside `requireAuth` —

src/app/api/__tests__/module-route-gate-inventory.test.ts

@@ -242,6 +242,8 @@ const EXEMPT_ROUTES: ReadonlyArray<string> = [
   "src/app/api/workouts/batch/route.ts",
   "src/app/api/labs/route.ts",
   "src/app/api/labs/[id]/route.ts",
+  // The Labs list's per-marker overview reads the same row store.
+  "src/app/api/labs/overview/route.ts",
   // v1.18.1 — the lab-result delete-Undo restore endpoint and the
   // user-scoped Biomarker catalog CRUD share the LabResult data-layer
   // reasoning: the labs module gates the SURFACES (the Labs page), not the