DL-377

User- and agent-scoped secrets rows may linger after their account is gone while no account-delete path exists (pre-production wipe posture); the change that adds account deletion must, in the same transaction, delete that account’s scoped rows at the Go door rather than a DB trigger and resolve declared_by’s ON DELETE RESTRICT for rows it declared outside its own scope (RIG-4032)

Status: Active (Matt, 2026-09-25)