docs: update CHANGELOG for 02.01.27 [skip ci]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

CHANGELOG.md

@@ -31,7 +31,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - License/subscription check
 - System email template branding (DB approach)
 
-## [02.01.25] - 2026-05-21
+## [02.01.27] - 2026-05-22
 
 ### Added
 - Health check endpoint at `/?mokowaas=health` with token authentication (#54)
@@ -43,13 +43,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Grafana plugin install via API (replaces deprecated CLI)
 - Dashboard with endpoint dropdown for multi-site monitoring
 - Provisioning on plugin install/update via script.php postflight
-- Deprovisioning on disable (datasource cleanup)
-- Plugin config fields: enable_health_endpoint, health_api_token, grafana_url, grafana_api_key
 
 ### Changed
+- Health endpoint always enabled — no config toggle needed
+- Grafana credentials hardcoded and obfuscated (XOR+base64)
+- Removed config fields: enable_health_endpoint, grafana_url, grafana_api_key
+- Grafana dashboard rebuilt: plugin-only panels, no Prometheus blackbox dependency
 - Migrated .gitea/ to .mokogitea/ directory standard
 - Updated all workflow references from MokoStandards to moko-platform
-- Version bumped to 02.01.25
+
+### Security
+- Grafana API key obfuscated in source (not stored in plain text)
 
 ## [02.01.08] - 2026-04-07