Hard-delete a workspace and everything in it.

Requires ADMIN role in the workspace (the write service decides); a workspace outside the caller's memberships is a 403, as on the update. The cascade removes every project, its data references, access keys, memberships and invites; the typed name must equal the workspace's current name, and the caller's only workspace cannot be deleted.

Args: request (Request): Incoming request (rate-limit plumbing). response (Response): Outgoing response (rate-limit plumbing). auth (AccountStampedAuth): Account-scope user auth (session token or CLI access JWT); its resolved user_id becomes the actor. workspace_id (str): The workspace to delete. name (str): The workspace's current name, as a typed confirmation. reason (str): Why it is being deleted; recorded on the audit row. _live (None): Write-path liveness gate (blocks a revoked JWT session).

Returns: DeleteWorkspaceResponse: The removed workspace and the cascade counts.

Raises: HTTPException: The write service's 400/403/404/409 verbatim, or a 503 when its response is ambiguous.