Request account deletion and bind a private completion receipt

Persist a cryptographically random 32-byte lowercase hex receiptToken privately before calling. Reuse it after a timeout. Only its hash is stored. New requests require recent authentication; receipt recovery never creates a second deletion request. Privileged processing removes local Better Auth credentials. Kept clinical, financial, safety and legal evidence and backup handling remain disclosed separately.

curl -X POST "https://example.com/v1/me/account/deletion" \  -H "Content-Type: application/json" \  -d '{    "receiptToken": "string",    "noticeVersion": "2026-09-12",    "confirmed": true  }'

{  "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",  "status": "pending",  "requestedAt": "2019-08-24T14:15:22Z",  "completedAt": "2019-08-24T14:15:22Z",  "receiptExpiresAt": "2019-08-24T14:15:22Z",  "noticeVersion": "string"}