390a693ec6
- Import verify_password from services.auth - Add UserDeleteConfirm Pydantic model (admin_password field) - delete_user handler now requires body; fails fast with 403 on wrong password - All existing SEC-09 cloud/MinIO purge logic and audit log unchanged - Three new tests pass: 204 on correct pw, 403 on wrong pw, 422 on no body