Delete My Account

Delete the caller's account (GDPR Art. 17). Body: {confirm: <your handle or email>}. Erases: OAuth identities, email, name, avatar, handle; every session and this host's library tokens; the seller profile of tenants the caller solely owned; memberships (a tenant the caller was the LAST owner of is soft-deleted and purged by the reaper after its grace period — incl. the personal library); scheduled cancellation of subscriptions; the TEXT of every email we sent them (collector/mail — the delivery record survives, the body does not); the handle in item attribution/provenance (collector/erasure.py, specs/erasure/v0.1). Retains what RETAINED_ON_DELETE lists. Recorded in the erasure ledger so a restore re-applies it.