feat: complete M0 — legal pages, consent, tip_views metrics, account deletion UI

- /legal/terms and /legal/privacy pages (linked from sign-in)
- Consent (consentGiven=true) recorded on first Google sign-in
- tip_views table: one row per tip served — enables activation + reaction rate queries
- tip_views purged on account deletion
- Delete account button on /connect (confirm → revoke tokens → purge data → sign out)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

services/api/src/routes/user.ts

@@ -1,6 +1,6 @@
 import { type Router as ExpressRouter, Router, Response } from 'express';
 import { db } from '../db/index.js';
-import { users, integrationTokens, tipFeedback, sessions } from '../db/schema.js';
+import { users, integrationTokens, tipFeedback, tipViews, sessions } from '../db/schema.js';
 import { eq } from 'drizzle-orm';
 import { requireAuth, AuthenticatedRequest } from '../middleware/session.js';
 
@@ -54,6 +54,7 @@ router.delete('/me', requireAuth, async (req: AuthenticatedRequest, res: Respons
   // Delete cascade
   await db.delete(integrationTokens).where(eq(integrationTokens.userId, userId));
   await db.delete(tipFeedback).where(eq(tipFeedback.userId, userId));
+  await db.delete(tipViews).where(eq(tipViews.userId, userId));
   await db.delete(sessions).where(eq(sessions.userId, userId));
 
   // Soft-delete user (GDPR: keep audit trail row without PII)