chore(release): v1.28.25 — every integration held to the same standard

Platform-wide hardening: the failure classes found live this week hunted down
across every integration.

Fitbit carried the same tombstone wedge fixed for Google — probe now matches
soft-deleted rows and the update resurrects them; the comment describing a
partial unique index that never existed is corrected. Sleep segment ids are
stable across re-scoring for Withings (session+segment-start), WHOOP/Polar
(one segment per stage, no positional index) and Oura (run-start keyed), each
with a session-scoped sweep that soft-deletes rows a re-score orphaned — so
legacy and affected nights heal as they are re-read.

One platform rule for deleted rows: source-owned readings resurrect on
re-import (Withings, WHOOP, Oura, Polar, Nightscout, mood webhook, CSV
re-imports, Apple stats day-totals); Apple sample-grain deletions stick per
the paired-client contract, and the mood bulk route's tombstone match is now
a true no-op reported as duplicate. Import counts reconcile against actual
createMany counts.

Google lifecycle: a dead token registers on the cycle's hard-fail ledger, so
an expired connection parks instead of stamping success hourly; backfill and
sleep-repair markers stamp only after a clean pass (pg-boss retries are now
real); failed measurement writes hold the watermark; no-op updates are
skipped; mapping.md tells the current truth.

Scale: doctor-report reads only consumed columns and enabled sections;
exports and backups keyset-paginate; achievements tally via SQL buckets;
series charts day-bucket dense kinds beyond 90 days; BP pairing is a linear
two-pointer; distinct-type scans run server-side; the graded-series cold
fallback is bounded; the fitbit defer tracker loops instead of spreading.

src/app/api/integrations/moodlog/webhook/route.ts

@@ -133,6 +133,11 @@ export const POST = apiHandler(async (request: NextRequest) => {
           source: "MOODLOG",
           date: entry.date,
           moodLoggedAt,
+          // No-op on a live row, a deliberate RESURRECTION on a tombstoned
+          // one — moodLog is the source of truth for the rows it minted; a
+          // created/updated event means the entry exists upstream (deletion
+          // arrives as its own `mood.deleted` event).
+          deletedAt: null,
         },
         create: {
           userId: user.id,
@@ -160,6 +165,8 @@ export const POST = apiHandler(async (request: NextRequest) => {
           score: entry.score,
           tags: entry.tags ? JSON.stringify(entry.tags) : null,
           source: "MOODLOG",
+          // Same resurrection rule as the externalId-keyed upsert above.
+          deletedAt: null,
         },
         create: {
           userId: user.id,