Patient Dashboard
Two Cloud Run services from one image: a credential free dashboard and a sync that mirrors Denticon into Firestore.
- Only query parameters proven to change totalCount are allowed; the query builder throws on anything else
- The freshness report starts from the cursors it expects, so a missing one shows as the worst status
- Link writes are transactions that decide again on fresh reads, and every link is versioned, audited and undoable










