feat(api): DELETE /api/projects/:id + store.deleteProject(连带 tasks/runs/events)

新增项目删除能力：store.deleteProject 事务内删 events(无 FK,手动)+ projects(tasks/runs/
approvals 经 schema ON DELETE CASCADE 连带清)；DELETE /api/projects/:id 暴露之。
store.test 覆盖连带清除 + 重复删报错。用于清理 cutover 测试遗留的一次性 smoke-test 项目
(本次经直连 DB 删除,未重启打断在跑的 worker；端点下次重启生效)。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/api/server.ts

@@ -92,6 +92,13 @@ export function buildServer(opts: ApiOptions): FastifyInstance {
     return store.reorderProjects(b.order.map(String)).map(projectOut);
   });
 
+  // 彻底删除项目（连带 tasks/runs/approvals/events，不可恢复）
+  app.delete('/api/projects/:id', (req) => {
+    const { id } = req.params as { id: string };
+    store.deleteProject(id);
+    return { ok: true };
+  });
+
   // 项目 logo：仓库内文件 → 流式返回；外链头像 → 302；无 → 404（前端用首字母徽章兜底）
   app.get('/api/projects/:id/logo', async (req, reply) => {
     const { id } = req.params as { id: string };

src/store/store.ts

@@ -145,6 +145,18 @@ export class Store {
     return row ? rowToProject(row) : null;
   }
 
+  /**
+   * 彻底删除项目（不可恢复）：tasks→runs/approvals 经 schema 的 ON DELETE CASCADE 连带清（foreign_keys=ON），
+   * events 表无外键、手动按 project_id 删。事务内一次性完成。
+   */
+  deleteProject(projectId: string): void {
+    if (!this.getProject(projectId)) throw new StoreError(`项目不存在: ${projectId}`);
+    this.db.transaction(() => {
+      this.db.prepare(`DELETE FROM events WHERE project_id = ?`).run(projectId);
+      this.db.prepare(`DELETE FROM projects WHERE id = ?`).run(projectId);
+    })();
+  }
+
   /** 部分更新项目配置（autonomy/concurrency/verifyCmd/model/status），带合法性校验。 */
   patchProject(projectId: string, patch: PatchProjectInput): Project {
     const cur = this.getProject(projectId);