01a086a5 - Hide forum posts instead of deleting rows

[TaprootFreakAI]

EN:
Staff can hide a forum post without removing the database row. DELETE /messages/:id stamps deleted_at and omits the note from reads; media, invoices, gifts, and relay copies stay. Deploy this API before the matching frontend. This supersedes the hard-delete approach in #101.

DE:
Moderatoren können einen Forenbeitrag ausblenden, ohne die Datenbankzeile zu löschen. DELETE /messages/:id setzt deleted_at und nimmt den Beitrag aus den Reads; Medien, Rechnungen, Geschenke und Relay-Kopien bleiben. Diese API vor dem Frontend deployen. Das ersetzt das echte Löschen in #101.

Details

markDeleted stamps deleted_at / deleted_by on the target and untagged direct replies. getById still returns the row so a profile note is not recreated. HTTP GET, photo, video, replies, and invoice treat a tagged row as 404. Lists and publish scans skip tagged rows. deleteById remains for internal cleanup only and is not used on this path.

Founder/moderator only, live role, 401/403/404/204/503. Public JSON never includes deletedAt.

[TaprootFreakAI]

EN:
Ready after 2 review passes.
Staff hide forum posts with a deleted_at stamp instead of removing rows.

DE:
Bereit nach 2 Review-Durchläufen.
Moderatoren blenden Forenbeiträge mit deleted_at aus, statt Zeilen zu löschen.

Details

Pass 1: CONTRIBUTING now lists DELETE /messages/:id as markDeleted (soft-hide). Concurrent reply-create vs hide and worker-lease publish were recorded and not counted as hide-contract defects (POST already 404s a tagged parent; claims already filter deleted_at IS NULL).

Pass 2: 0 counted findings at 4dec8cc8. Comment sources empty (issue/reviews/inline/threads). mergeable: MERGEABLE. CI SUCCESS at this head: Typecheck, Lint, Handbook, E2E-check, Test (100% coverage), Build, E2E. No classic required checks on develop.

Do not merge the hard-delete PR #101.