How to implement GDPR right to erasure and data portability in a Next.js SaaS -- a self-service account deletion endpoint, cascading Drizzle ORM deletes, a data export download, and a confirmation gate so users cannot accidentally delete their account.