Delete project after explicit slug confirmation and write pending-delete; provider cleanup runs on the pending-delete reconciler after the response

Project deletion accepted and hidden from project reads; the pending-delete reconciler, woken by this request, tears down provider resources and hard-deletes the project. Retrying an already pending deletion is accepted again.