#656 Tenant deletion has no workflow (offboarding)

engine/security/platform.py:delete_tenant() has 170+ lines of synchronous deletion logic: deletes from 20+ tables directly, no pre-deletion notification, no data export option, no workflow for audit/recovery. Should create tenant_offboard workflow.