feat: complete TASK-WP2-01 project foundations

apps/api/src/registration.ts

@@ -985,6 +985,11 @@ export class RegistrationService {
     });
   }
 
+  authorizeUserMutation(input: { csrfToken: string; sessionToken: string }) {
+    const session = this.authenticatedUserMutationSession(input.sessionToken, input.csrfToken, this.options.clock());
+    return { userId: session.user_id };
+  }
+
   logoutUser(input: { csrfToken: string; sessionToken: string }) {
     const now = this.options.clock();
     this.runImmediate("session_revoke", () => {
@@ -1196,6 +1201,10 @@ export class RegistrationService {
       this.database.prepare("DELETE FROM privacy_consents WHERE user_id = ?").run(session.user_id);
       this.database.prepare("DELETE FROM credit_accounts WHERE user_id = ?").run(session.user_id);
       this.database.prepare("DELETE FROM user_profiles WHERE user_id = ?").run(session.user_id);
+      const projectsTable = this.database.prepare(`
+        SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'projects'
+      `).get();
+      if (projectsTable) this.database.prepare("DELETE FROM projects WHERE owner_id = ?").run(session.user_id);
       this.database.prepare("DELETE FROM account_deletion_challenges WHERE user_id = ?").run(session.user_id);
       this.database.prepare("DELETE FROM email_challenges WHERE email = ?").run(session.normalized_email);
       this.database.prepare("DELETE FROM auth_rate_limits WHERE rate_key = ?")