Report every restored section, disclose export decrypt losses, re-fold on zone change

- The restore summary counts practitioners, encounters, the three link
  tables, and vaccinations — restored in full since 08-01 but absent
  from the report, so a file carrying visits or an Impfpass read as if
  those sections were empty.
- A portable export that cannot open a field's ciphertext still nulls it
  fail-soft, but now names the loss in the file's own decryptFailures
  manifest — an export with a lost emergency note is no longer
  byte-identical to one where the note was never written.
- A timezone change enqueues the medication-compliance re-fold: the
  rollup keys its rows by the local day minted under the OLD zone, and
  the coverage probe compares counts, not keys, so nothing else could
  notice the stale bucketing.

src/app/api/admin/backups/[id]/restore/route.ts

@@ -1532,6 +1532,11 @@ const handler = apiHandler(
           customMetrics: summary.customMetrics,
           customMetricEntries: summary.customMetricEntries,
           correlationPatterns: summary.correlationPatterns,
+          practitioners: summary.practitioners,
+          encounters: summary.encounters,
+          encounterLinks: summary.encounterLinks,
+          vaccinations: summary.vaccinations,
+          vaccinationLinks: summary.vaccinationLinks,
         },
       },
     });