Cancel the authenticated user's pending account deletion

Explicitly cancels a pending deletion at entire-core, restoring full access. Allowed during the 7-day cooldown even though the session is otherwise restricted. Idempotent — succeeds whether or not a deletion was pending. Requires a valid session cookie and CSRF token; the session is left intact.