Flow: REST create → GraphQL read → REST delete

Proves all three protocols share one session-scoped data store. Step 1 — POST /api/v1/users (REST) — creates a user. Step 2 — returns the equivalent GraphQL query — run it at /graphql to read the same record. Step 3 — returns the REST delete URL — call it to remove the record (disappears from GraphQL too).