Delete (soft) a prior authorization

Soft-delete a prior authorization by setting active=false. Distinct from status=cancelled: cancellation is a legitimate workflow end-state, deletion is a retraction of a wrong submission. Deleted authorizations are excluded from list endpoints and return 404 on subsequent GETs.