Disable identity verification

Delete the project identity secret. Forms that hold unverified submissions stop protecting themselves and the secret cannot be recovered, so this is destructive (Tier C): confirm must equal the project's slug (a value fetched from the project read, never a word the caller already knows). Forms that still require verified respondents block the change with a 409. Scope: workspace:manage; the key acts as the human who minted it.