Data export and retention

• Personal data export. Every user can export their own data as JSON.
• Trash retention. Deleted items are kept for a period the organization sets, then purged.
• Erasing a user. The user is anonymized in place, so the history stays consistent without naming them.