fix(hub): account deletion left device keys and swarm sources behind

erase_account cleared memberships, notifications, tokens and node
registrations, but not user_devices or swarm_sources.

A device key left on the tombstone still belonged to it, so an account
created later from the same desktop installation - which keeps its
private half - was refused that device with a 409 that only reached the
console. swarm_sources is keyed by the user id despite its column name
and carries the node's ip:port.

Both are now erased, which is what the privacy statement promises: every
account row goes except the one-year IP log.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01D9MCBBWSm9GhBESmqzJxNy

0 files changed, 0 insertions, 0 deletions