🧪 Auto-PR: Merge develop → test - #1027

…flag

`maxhealth_records_withheld` was added an hour ago for a warning neither viewer
is going to show, so it ships nowhere. Removed before it became a field we had
to keep emitting for someone.

What replaces it costs nothing: `complete` is sound as long as only `true` is
acted on. `true` means no selective scope and no study scope — the patient's
whole record, which is worth saying. `false` is the ambiguous half, and no
longer has to carry meaning: what a narrowed share covers is what the spec's
`query` hints now say.

So the recipient is told something only when it can be said truthfully, and a
narrowed share says nothing rather than raising a caveat the reader has to
interpret. isCompleteShare is documented as affirmation-only rather than
deprecated.