feat(vaccinations): add the immunization log route, nav entry and shared-record family

- register /vaccinations in the clinical nav spine, module-gated on
  vaccinations (default-on) and part of the shared record
- join /vaccinations to the profile shared-record route family so a scoped
  profile grant can present the page it is allowed to read
- add the page shell: authenticated, module-gated, with the standard
  module-off redirect the medications surface uses
- add the nav label and the surface title/subtitle/empty copy in six locales

src/components/layout/nav-model.ts

@@ -12,6 +12,7 @@ import {
   Pill,
   Settings,
   Stethoscope,
+  Syringe,
   Thermometer,
   Trophy,
   Waves,
@@ -193,6 +194,20 @@ export const NAV_DESTINATIONS: ReadonlyArray<NavDestination> = [
     tourId: "nav-illness",
     requiresModule: "illness",
   },
+  // v1.38.0 — the immunization log sits in the clinical spine beside Illness.
+  // Born-gated: `requiresModule: "vaccinations"` reads the resolved module map,
+  // so the entry is absent until the account keeps the module on (default-on —
+  // it drops only when a user turns it off). SURFACE-gated: the `/api/vaccinations*`
+  // data routes stay reachable so a restore / import keeps working and
+  // re-enabling finds every dose intact.
+  {
+    href: "/vaccinations",
+    sharedRecord: true,
+    tKey: "nav.vaccinations",
+    icon: Syringe,
+    tourId: "nav-vaccinations",
+    requiresModule: "vaccinations",
+  },
   // v1.18.0 — Workouts and Recovery both left the left-nav: each already
   // surfaces as an Insights tab-strip pill (`/insights/workouts` gated on
   // a workout row, `/insights/recovery` always present), so neither is a

src/components/vaccinations/vaccinations-view.tsx

@@ -0,0 +1,47 @@
+"use client";
+
+/**
+ * v1.38.0 — the immunization log surface.
+ *
+ * A calm, retrospective transcription of a lifetime Impfpass. The list groups
+ * doses by their component antigen and shows where each series stands, with the
+ * numbers resolved server-side (`src/lib/vaccinations/series.ts`) so this
+ * client never re-derives "N von M". Neutral cards, status through a discreet
+ * badge only — no red card, no overdue tint. It reproduces the record; it does
+ * not adjudicate what is due.
+ *
+ * The list itself arrives with the capture surface; this shell owns the page
+ * header, the empty invitation, and the load/error states every module surface
+ * shares.
+ */
+import { Plus, Syringe } from "lucide-react";
+
+import { Button } from "@/components/ui/button";
+import { EmptyState } from "@/components/ui/empty-state";
+import { PageHeader } from "@/components/ui/page-header";
+import { useTranslations } from "@/lib/i18n/context";
+
+export function VaccinationsView() {
+  const { t } = useTranslations();
+
+  return (
+    <div className="space-y-6">
+      <PageHeader
+        title={<span data-tour-id="vaccinations-hero">{t("vaccinations.title")}</span>}
+        description={t("vaccinations.subtitle")}
+      />
+
+      <EmptyState
+        icon={<Syringe className="size-6" />}
+        title={t("vaccinations.empty.title")}
+        description={t("vaccinations.empty.description")}
+        action={
+          <Button className="min-h-11 sm:min-h-9" disabled>
+            <Plus className="size-4" />
+            {t("common.add")}
+          </Button>
+        }
+      />
+    </div>
+  );
+}