chore(release): v1.4.38

Robustness sweep, perf hotspots, full localization, coach gate
cascade closure.

- /api/dashboard/summary cold-mount 4.6 s → ~500 ms via DAY-bucket
  sparkline + 60 s response cache.
- Coach API gate inventory test surfaced and closed two orphan
  routes (chat[id] GET+DELETE, chat-message feedback POST).
- Cross-tz fast-path runtime guard falls back to live for users
  more than ±3 h from UTC; proper bucket minting stays v1.5.
- es / fr / it / pl coverage 27 % → 63 % (~3 400 new strings) plus
  three medication-cluster placeholder restorations.
- IANA timezone validation closes the User.timezone self-DoS
  regression the new dashboard SQL would have surfaced.
- Unit suite 4520 → 4524.

See CHANGELOG.md for the full set.

src/lib/cache/invalidate.ts

@@ -67,6 +67,11 @@ export function invalidateUserMedications(userId: string): void {
   // v1.4.36 W1 — medication writes change the MEDICATION_COMPLIANCE
   // target rollup (compliance7 / compliance30 / consistency strip).
   caches.insightsTargets.deleteByPrefix(userId);
+  // v1.4.38 W-F — `/api/dashboard/summary` lives under the analytics
+  // cache and reads `medicationIntakeEvent` for both today's compliance
+  // tally and the 365-day streak feed. A taken / skipped event must
+  // evict the user-bucket so the next iOS poll reflects the change.
+  caches.analytics.deleteByPrefix(`${userId}|`);
 }
 
 /**