Member Management, Account Deletion, and Kanban Improvements

New

Account Deletion: Users can now permanently delete their account from Settings → Security → Danger Zone. Requires typing your email to confirm. Your profile is anonymized across all workspaces and the session is immediately revoked.

Improved

Private Attachments: Task attachments are no longer publicly accessible — files are now served via short-lived presigned URLs. Avatars are served from a separate CDN bucket and remain fast to load.

Kanban Drag and Drop: The kanban board now uses a rewritten drag-and-drop engine. Cards show a static placeholder at the exact drop position, the overlay rotates slightly while dragging, and sort order is preserved correctly after dropping — including both ascending and descending column sorts.

Fixed

Removing workspace members: Removing a member no longer breaks task history — the member is soft-deleted and appears as “Deleted User” in task views rather than being wiped from the record.

Invited user role assignment: Invited users no longer receive an incorrect role on an existing workspace during the sync process.

Stream-tier workspace incorrectly locked: Workspaces on the Stream plan were being incorrectly locked after the billing grace period due to a missing field in the database query.

Subtask progress bar disappearing after task update: The subtask progress bar no longer vanishes after any task is updated — missing relations in the WebSocket payload were causing the data to drop.