feat(settings): let users delete their account

README.md

@@ -54,6 +54,8 @@ To Be Played is split into three repositories:
   to Core once per page load (`POST /api/library/broken-images`, only with a session). Core repairs it at night;
   a repaired cover comes back as `imageUrl`.
 - German and English, dark mode, mobile layout, session-expired message instead of a silent logout.
+- **Delete my account** in the settings: a dialog asks for the own email and the password. Auth blocks the
+  account at once and removes it after 30 days; the page ends the session and goes to the landing page.
 - **Build version** in the settings: commit and build time of Frontend, Auth and Core, each hash links to its
   commit. CI passes them as Docker build args; a local build shows `dev`.
 - **Installable** as an app on phone and desktop (web app manifest, no service worker, so no offline mode).