docs(openapi): publish documentOnly on share-link create and list

The field has been served on both routes since v1.28.13 but was
missing from ShareLinkCreated and ShareLinkList, which are
additionalProperties: false.

docs/api/openapi.yaml

@@ -16160,6 +16160,8 @@ components:
               type: boolean
             documentCount:
               type: number
+            documentOnly:
+              type: boolean
             needsReselection:
               type: boolean
             allowFhirApi:
@@ -16204,6 +16206,7 @@ components:
             - rangeEnd
             - protected
             - documentCount
+            - documentOnly
             - needsReselection
             - allowFhirApi
             - resourceTypes
@@ -16255,6 +16258,8 @@ components:
                     type: boolean
                   documentCount:
                     type: number
+                  documentOnly:
+                    type: boolean
                   needsReselection:
                     type: boolean
                   allowFhirApi:
@@ -16286,6 +16291,7 @@ components:
                   - rangeEnd
                   - protected
                   - documentCount
+                  - documentOnly
                   - needsReselection
                   - allowFhirApi
                   - resourceTypes

src/lib/openapi/routes/health-record.ts

@@ -26,6 +26,12 @@ const shareLinkSummary = z.object({
   // v1.28 — how many documents this share carries. Never the ids, never the
   // bytes; the share serve route is the only decrypt path.
   documentCount: z.number(),
+  // v1.28.13 — the frozen documents-only flag, written once at creation and
+  // never updated. True means the link carries NO report scope at all (the
+  // create route forces `selection` empty server-side even if the body sent
+  // one) and the share view renders only the frozen document set, never a
+  // health-record section.
+  documentOnly: z.boolean(),
   // Whether this link's frozen scope predates the selection model. Every such
   // link was revoked on upgrade; the sharing list surfaces this so the owner
   // knows to re-mint rather than wondering why a working link stopped.