Data controls

Prototype placeholders for disconnect and deletion are wired to durable audit events so the paths are visible before Meta review.