Delete Review

Soft-delete a past (completed or cancelled) review.

Restricted to Kobalt admins (validate_admin_role returns 404 for everyone else). Works during hard masquerade (company_id is swapped, so no write restriction applies) but not during soft masquerade, where the standard non-GET block in get_user_info rejects it. The row is retained for audit/history; list and detail endpoints filter on deleted_at IS NULL so the review disappears everywhere.