chore(release): v1.28.35 — timestamps honor the profile timezone

Client-rendered times fell back to the hardcoded display zone
(Europe/Berlin) because neither useFormatters() nor the legacy format.ts
helpers ever received users.timezone. A third localStorage mirror
(timezone-mirror.ts, following the time-format/date-format pattern)
carries the validated profile zone from /api/auth/me into both read
paths; the fallback chain is strictly profile → Europe/Berlin — never
the browser zone, so screen, PDF, and export cannot disagree.
makeFormatters validates its zone before Intl (a poison value falls back
instead of throwing inside every render).

Same pass, per the two-document audit: formatUpdatedLabel boundary and
clock now resolve one zone in every state (the undefined-tz browser hole
is closed); @db.Date calendar fields render UTC-pinned so profiles west
of UTC cannot shift a day; dose-history day headings and GLP-1 weekday
labels derive from the display zone; chart day/month labels are
encoding-derived and UTC-pinned (bucket math untouched, byte-identical
for Berlin profiles); the clinician share view renders in the patient's
timezone instead of the container's; Playwright pins Europe/Berlin.
Server day-key semantics, streak anchoring, insight cache keys, and
verbatim wall-clock strings are untouched by construction and pinned by
the new Auckland/New_York/Manila + DST test matrix.

tests/integration/timezone-per-user.test.ts

@@ -147,6 +147,25 @@ describe("per-user timezone — Pacific/Auckland end-to-end", () => {
     expect(await resolveUserTimezone(me.id)).toBe("Asia/Tokyo");
   });
 
+  // Issue #490 — the client display fix rides a localStorage mirror that
+  // `fetchMe` fills from `/api/auth/me`. Pin that the route actually
+  // carries the profile zone (the value the mirror consumes), so a field
+  // rename / select-list slip can't silently collapse every client render
+  // back to the Berlin fallback.
+  it("GET /api/auth/me carries the profile timezone the client mirror consumes", async () => {
+    await seedAucklandUser();
+
+    const { GET } = await import("@/app/api/auth/me/route");
+    // The handler resolves the session from the mocked cookie jar; it
+    // takes no request argument.
+    const res = await GET();
+    expect(res.status).toBe(200);
+    const body = (await res.json()) as {
+      data: { timezone?: string } | null;
+    };
+    expect(body.data?.timezone).toBe("Pacific/Auckland");
+  });
+
   it("PUT /api/auth/me/timezone rejects an invalid IANA zone with 422", async () => {
     await seedAucklandUser();