Delete — a client can only ask

Deletion is not a button that erases on click. A client can request deletion; a staff attorney authorizes it, and the executed expunge writes an audit record of what was removed and who approved it.

From store/src/expunge_requests.rs:

//! A client can only *ask*: [`create`] inserts a `pending` row. A
//! Owner/Admin/Staff then resolves it — [`authorize`] (after running the
//! admin-gated expunge, passing the resulting audit-row id) or
//! [`deny`]. The executed expunge is always category `client_request`.