docs: close BUG-03/05, add Phase 27 features + renumber Android to Phase 28

BUGS.md

@@ -68,7 +68,7 @@ the authoritative, issue-by-issue record lives **here**.
 
 ### BUG-03 — DTC/MIL codes are never persisted; lost on OBD disconnect or reboot
 
-- **Status**: `FIXED` (commit `e2f2314`; pending deploy/verify → CLOSED)
+- **Status**: `CLOSED` (commit `e2f2314`; deployed + verified 2026-08-11)
 - **Fix**: Persist MIL + codes to SQLite on each poll (`save_dtc_state`), `/api/dtc` falls back to
   the persisted snapshot when OBD is offline, `get_overview_stats` counts the real `dtc` table,
   and a schema migration rebuilds the unused `NAME/STATUS/DTC_ID` table. Cleared codes are tracked
@@ -110,17 +110,9 @@ the authoritative, issue-by-issue record lives **here**.
 ---
 
 ### BUG-05 — Server route replay reports `speed_source: "gps"` even when OBD speed is present
-- **Status**: `OPEN`
-- **Severity**: Low (display/metadata)
-- **Area**: `server/modules/db.py` `get_trip_route`
-- **Phase**: Phase 26
-- **Symptom**: Server route replay always labels points with `speed_source: "gps"`, even though the
-  points carry real OBD `speed`. The Pi's `route_points` correctly uses `"obd"` when speed > 0.
-- **Root cause**: `get_trip_route` hardcodes `speed_source: "gps"` rather than deriving it from the
-  per-point speed value.
-- **Fix scope / actions**: Mirror the Pi's logic (`"obd"` when speed > 0, otherwise `"gps"`) in the
-  server route response.
-- **Acceptance**: Server route points report `obd` speed source where wheel speed was recorded.
+- **Status**: `CLOSED` (commit `e2f2314`; deployed + verified 2026-08-11)
+- **Fix**: `get_trip_route` now mirrors the Pi's logic: `"obd"` when speed > 0, otherwise `"gps"`.
+  Server docker container rebuilt and health-checked.
 
 ---
 
@@ -190,5 +182,15 @@ the authoritative, issue-by-issue record lives **here**.
 
 ## Resolved bugs
 
-(No entries yet — resolved-and-fixed bugs land here, oldest→newest. Keep the bug's original
-symptom text intact and add the fix/closure details.)
+### BUG-03 — DTC/MIL codes are never persisted; lost on OBD disconnect or reboot
+- **Status**: `CLOSED` 2026-08-11
+- **Commit**: `e2f2314`
+- **Verification**: Deployed to Pi, service restarted clean, `/api/dtc` returns persisted snapshot
+  when OBD offline, `/api/stats` shows `active_dtc: 0`, `save_dtc_state`/`get_persisted_dtc_state`
+  confirmed present in running code.
+
+### BUG-05 — Server route replay speed_source always "gps"
+- **Status**: `CLOSED` 2026-08-11
+- **Commit**: `e2f2314`
+- **Verification**: Server git reset to origin, Docker rebuild, `/health` OK on LAN and Cloudflare
+  Tunnel. `get_trip_route` now uses `"obd" if speed > 0 else "gps"` matching Pi logic.