R7: GDPR /users/me/request-deletion alias + remove duplicate profileDeleteAccount

- auth/gdpr.py: dodan @me_router.post('/request-deletion') alias
  koji proxy-a na request_erasure (Art. 17). Koristi pravi EraseReq pydantic.
- static/app.html: obrisana placeholder profileDeleteAccount funkcija
  na liniji 944 (M10 mock alert) — sada samo real implementacija na 1902.
- E2E verified: damir@pgz.hr → POST /users/me/request-deletion → 200,
  DB row pgz_sport.gdpr_erasure_requests #1 pending.

Tag: P0-demo-fix

auth/gdpr.py

@@ -192,6 +192,11 @@ def me_gdpr_export(user = Depends(require_user)):
 @me_router.post("/gdpr-erase")
 def me_gdpr_erase(req: 'EraseReq', request: Request, user = Depends(require_user)):
     return request_erasure(req=req, request=request, user=user)
+@me_router.post("/request-deletion")
+def me_request_deletion(req: EraseReq, request: Request, user = Depends(require_user)):
+    """Frontend alias for /gdpr-erase (R7 — Art. 17 erasure request)."""
+    return request_erasure(req=req, request=request, user=user)
+
 
 @me_router.get("/gdpr-consent")
 def me_gdpr_consent(user = Depends(require_user)):