[regeloapp-coder]

Summary

• Remove the client-side database fallback when account deletion through the Storage-cleaning Edge Function fails.
• Fail closed when Storage folder traversal exceeds its depth limit.
• Revoke direct execution of delete_own_account() for anon and authenticated, and add an RLS regression assertion.
• Bump Android app version to 1.3.2 (versionCode 132) and document the backend deployment requirement.

Deployment

The 2026-10-26_app_v1_4_1.sql migration and updated delete-account Edge Function have already been applied to Supabase project pqmfezkvaslqedalwwnn. The deployed function rejects unauthenticated requests (HTTP 401 smoke test).

Validation

• git diff --check passed.
• Live RPC permission query confirms anon and authenticated cannot execute the deletion RPC.
• Android unit tests could not be run locally because Java is unavailable; Deno is unavailable for a local Edge Function check.