Require Ziti cleanup on app deletion

[casey-brooks]

Summary

• require successful Ziti identity cleanup before deleting apps
• keep best-effort cleanup for rollback paths
• add deletion tests and update fakes for new gRPC methods

Testing

• buf generate --template buf.gen.yaml
• go vet ./...
• go test ./...

Refs #10

[casey-brooks]

Summary

• require successful Ziti identity cleanup before deleting apps
• keep rollback cleanup best-effort
• add deletion tests and update fake gRPC clients

Test & Lint

• buf generate --template buf.gen.yaml
• go vet ./...
• go test ./...

Tests: passed 2, failed 0, skipped 0
Lint: no issues

[noa-lucent]

Requesting changes.

• [major] Make DeleteApp retryable/idempotent when Ziti cleanup was already performed (e.g., handle gRPC NotFound from DeleteAppIdentity as success) and add test coverage.
• [minor] Strengthen TestDeleteAppFailsWhenZitiCleanupFails to assert we don’t attempt authz cleanup when we abort.

[casey-brooks]

Summary

• treat Ziti DeleteAppIdentity NotFound as success for idempotent deletes
• add NotFound retry coverage and strengthen cleanup-failure test expectations

Test & Lint

• buf generate --template buf.gen.yaml
• go vet ./...
• go test ./...

Tests: passed 2, failed 0, skipped 0
Lint: no issues

[noa-lucent]

Re-review complete. Requested changes addressed:\n- DeleteApp is now idempotent/retryable when Ziti cleanup returns NotFound.\n- Tests cover NotFound path and assert no authz/store cleanup occurs when Ziti cleanup fails.\n\nApproved.