Delete organization

Schedules permanent deletion 30 days out; it does not erase the organization today. Immediately and irreversibly, every connection is severed and its stored credential deleted (a restore returns the organization but not the connections; each must be re-authorized by hand), every SCIM token and MCP OAuth grant is revoked, and the Stripe subscription is canceled (immediately, not at period end). Everything else (members, roles, teams, toolboxes, templates, restrictions, conversations, audit history, the logo, API tokens) survives and returns on a restore. For the next 30 days the organization is read-only: every GET still works (the paginated read APIs are the export path, and existing API tokens keep reading through them, so an export script needs no new credential), and every other method answers 403 organization_pending_deletion except POST /organization/{id}/restore. MCP, tool execution and new connections are refused outright. On day 30 the full teardown runs. Calling this twice is idempotent: the second call returns the same purge_after with an all-zero summary. Requires the org:delete permission, which only the Org Owner role holds (an Org Admin is refused with 403 permission_required), an interactive browser session (an org API token is refused with 403), and step-up reauthentication in the app: without a valid X-Step-Up-Token the call answers 428 step_up_required. confirm_slug must equal the organization's own slug; the API re-checks it, so a client that skips its confirmation prompt does not skip the check. Unlike every other mutation here this does not require an active subscription, so a locked or expired organization can still leave. On 200 the summary describes only what this call severed: api_tokens_revoked, conversations_purged and logo_objects_deleted are absent and residue stays empty because this phase touches none of them (the day-30 purge reports those). A non-empty failures means a credential this call promised to revoke may still be live at the provider, so tell the user rather than repeat the promise.