Build GDPR compliance system: data export, account deletion, consent

- Data export (Art. 15/20): GET /api/gdpr/export serves a full JSON export
  of the user's data (credentials/tokens excluded, exclusions declared)
- Right to erasure (Art. 17): self-service deletion with 30-day grace
  period (Settings -> Privacy & Data), cancellable; daily /api/cron/gdpr
  drain cancels Stripe billing, purges Spaces files, cascade-deletes the
  account, anonymizes consent rows, and writes audit evidence
- Migration 0011: account_deletion_requests (partial unique index = one
  pending per user) + FK-less consent_log (survives erasure)
- Consent: terms/privacy acceptance logged at signup (email + Google);
  cookie banner with analytics opt-out (umami.disabled), choices logged
  server-side for signed-in users via POST /api/gdpr/consent
- Admin deleteUser upgraded to the same full purge (was leaving Spaces
  files and Stripe subscriptions orphaned)
- /gdpr legal page now points at the self-service tools
- scripts/verify-gdpr.ts: end-to-end verification vs live dev DB (22/22)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

components/dashboard/sidebar.tsx

@@ -7,7 +7,7 @@ import {
   LayoutDashboard, Building2, Users, CreditCard,
   Wrench, FileText, Receipt, Settings, LogOut,
   X, Menu, ChevronRight, Zap, Sparkles, Bot, BarChart3, Hammer, ClipboardList,
-  PanelLeftClose, PanelLeftOpen, CalendarDays, Activity, Brain, Bell, Palette, KeyRound, Plug, Webhook,
+  PanelLeftClose, PanelLeftOpen, CalendarDays, Activity, Brain, Bell, Palette, KeyRound, Plug, Webhook, ShieldCheck,
 } from "lucide-react"
 import { cn } from "@/lib/utils"
 import { Logo, LogoMark } from "@/components/shared/logo"
@@ -245,6 +245,28 @@ function NavContent({
           {!collapsed && "Webhooks"}
         </Link>
 
+        <Link
+          href="/settings/privacy"
+          onClick={onClose}
+          title={collapsed ? "Privacy & Data" : undefined}
+          className={cn(
+            "group relative flex items-center rounded-xl transition-all duration-200",
+            collapsed ? "justify-center p-2.5" : "gap-3 px-3 py-2.5",
+            pathname === "/settings/privacy"
+              ? "bg-indigo-600/15 text-indigo-300"
+              : "text-white/50 hover:bg-white/[0.05] hover:text-white/90"
+          )}
+        >
+          {pathname === "/settings/privacy" && (
+            <div className="absolute left-0 top-1/2 -translate-y-1/2 w-[3px] h-5 rounded-r-full bg-indigo-500" />
+          )}
+          <ShieldCheck className={cn(
+            "h-4 w-4 shrink-0 transition-colors",
+            pathname === "/settings/privacy" ? "text-indigo-400" : "text-white/30 group-hover:text-white/60"
+          )} />
+          {!collapsed && "Privacy & Data"}
+        </Link>
+
         {(plan === "landlord" || plan === "lifetime") && (
           <>
             <Link