chore(release): v1.4.38

Robustness sweep, perf hotspots, full localization, coach gate
cascade closure.

- /api/dashboard/summary cold-mount 4.6 s → ~500 ms via DAY-bucket
  sparkline + 60 s response cache.
- Coach API gate inventory test surfaced and closed two orphan
  routes (chat[id] GET+DELETE, chat-message feedback POST).
- Cross-tz fast-path runtime guard falls back to live for users
  more than ±3 h from UTC; proper bucket minting stays v1.5.
- es / fr / it / pl coverage 27 % → 63 % (~3 400 new strings) plus
  three medication-cluster placeholder restorations.
- IANA timezone validation closes the User.timezone self-DoS
  regression the new dashboard SQL would have surfaced.
- Unit suite 4520 → 4524.

See CHANGELOG.md for the full set.

scripts/drain-per-sample-cumulative.ts

@@ -32,7 +32,18 @@
 import "dotenv/config";
 
 import { prisma } from "@/lib/db";
-import { drainPerSampleCumulative } from "@/lib/measurements/drain-per-sample-cumulative";
+import {
+  drainPerSampleCumulative,
+  DRAIN_CUMULATIVE_CUTOFF_HOURS,
+} from "@/lib/measurements/drain-per-sample-cumulative";
+
+// v1.4.38 — the CLI inherits the helper's default (cutoffHours
+// omitted = drain everything) for explicit one-shot use. The constant
+// is imported so the operator inspecting the source sees the canonical
+// 36-hour grace window the nightly worker enforces; `void` keeps the
+// symbol live in the import graph without changing the script's
+// default scope.
+void DRAIN_CUMULATIVE_CUTOFF_HOURS;
 
 interface ParsedArgs {
   userId?: string;