Identity and account records added; governance remains
Cognito provides verified email/password identity, while a JWT-protected DynamoDB service stores each account’s medication and optional patient record. Browser health-data persistence is disabled. Formal audit, retention, export, consent, compliance, and operational controls remain necessary.