Delete

Soft-delete an integration instance.

Removes the Postgres metadata row and best-effort deletes the corresponding secret from the secrets backend. If the secrets backend cleanup fails the row is already gone and the failure is logged but not surfaced to the caller.

TODO: for OAuth-authorized MCP integrations, call the provider's revocation endpoint (RFC 7009) before deletion so the issued tokens are invalidated at the source instead of relying on their natural expiry.

Permissions: users with integration-setup permission on the owning org, or platform admin. organization_id defaults to the caller's own org; platform admins may supply a different org to delete its integrations.

Returns HTTP 404 if the instance or the target organization does not exist.