feat: complete M0 — legal pages, consent, tip_views metrics, account deletion UI

- /legal/terms and /legal/privacy pages (linked from sign-in)
- Consent (consentGiven=true) recorded on first Google sign-in
- tip_views table: one row per tip served — enables activation + reaction rate queries
- tip_views purged on account deletion
- Delete account button on /connect (confirm → revoke tokens → purge data → sign out)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

services/api/src/db/schema.ts

@@ -31,6 +31,14 @@ export const tipFeedback = sqliteTable('tip_feedback', {
   createdAt: text('created_at').notNull(),
 });
 
+// Each row = one tip served. Join with tipFeedback on tipId to compute reaction rate + dwell.
+export const tipViews = sqliteTable('tip_views', {
+  id: text('id').primaryKey(),
+  userId: text('user_id').notNull().references(() => users.id),
+  tipId: text('tip_id').notNull(),
+  servedAt: text('served_at').notNull(),
+});
+
 export const sessions = sqliteTable('sessions', {
   id: text('id').primaryKey(),
   userId: text('user_id').notNull().references(() => users.id),