Build GDPR compliance system: data export, account deletion, consent

- Data export (Art. 15/20): GET /api/gdpr/export serves a full JSON export
  of the user's data (credentials/tokens excluded, exclusions declared)
- Right to erasure (Art. 17): self-service deletion with 30-day grace
  period (Settings -> Privacy & Data), cancellable; daily /api/cron/gdpr
  drain cancels Stripe billing, purges Spaces files, cascade-deletes the
  account, anonymizes consent rows, and writes audit evidence
- Migration 0011: account_deletion_requests (partial unique index = one
  pending per user) + FK-less consent_log (survives erasure)
- Consent: terms/privacy acceptance logged at signup (email + Google);
  cookie banner with analytics opt-out (umami.disabled), choices logged
  server-side for signed-in users via POST /api/gdpr/consent
- Admin deleteUser upgraded to the same full purge (was leaving Spaces
  files and Stripe subscriptions orphaned)
- /gdpr legal page now points at the self-service tools
- scripts/verify-gdpr.ts: end-to-end verification vs live dev DB (22/22)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

lib/email/send.ts

@@ -221,6 +221,51 @@ export function teamInviteHtml({
   })
 }
 
+export function accountDeletionRequestedHtml({
+  name,
+  scheduledDate,
+  graceDays,
+}: {
+  name: string
+  scheduledDate: string
+  graceDays: number
+}) {
+  return emailShell({
+    preheader: `Your account is scheduled for permanent deletion on ${scheduledDate}.`,
+    eyebrow: "Account deletion",
+    accent: BRAND.red,
+    title: "Your account deletion is scheduled",
+    intro: `Hi ${escapeHtml(name)}, we received your request to delete your account and all associated data.`,
+    body:
+      detailTable(
+        [
+          { label: "Deletion date", value: scheduledDate, accent: true },
+          { label: "Grace period", value: `${graceDays} days` },
+        ],
+        BRAND.red
+      ) +
+      paragraph(
+        "Until then your account stays fully usable, and you can cancel the deletion at any time from Settings → Privacy & Data. After the deletion date, ALL your properties, tenants, payments, documents, and uploaded files are permanently erased — this cannot be undone."
+      ),
+    footerNote:
+      "If you did not request this, sign in and cancel the deletion immediately, then change your password.",
+  })
+}
+
+export function accountDeletionCompletedHtml() {
+  return emailShell({
+    preheader: "Your account and personal data have been permanently deleted.",
+    eyebrow: "Account deletion",
+    title: "Your account has been deleted",
+    intro:
+      "As requested, your account and the personal data associated with it have been permanently deleted from our systems.",
+    body: paragraph(
+      "Financial records we are legally required to retain (for example, invoices held by our payment processor) are kept only for as long as the law requires. Everything else — your properties, tenants, documents, and uploaded files — is gone."
+    ),
+    footerNote: "Thanks for having used Property Management Network. You're welcome back anytime.",
+  })
+}
+
 export function followUpHtml(message: string) {
   return emailShell({
     preheader: message.slice(0, 140),