Space: deleting a space is for good (it was only marked deleted, so its files, list items and visitors' private storage stayed in the database) (#61)

ddiff --git a/server/spaces/spaces.js b/server/spaces/spaces.js
iindex f038dc9..d67db3b 100644
---- a/server/spaces/spaces.js
++++ b/server/spaces/spaces.js
@@@ -64,7 +64,8 @@ function createSpaces({ store, config, projects, sites, deploys, takedowns, log
          forked: db.prepare('UPDATE space_apps SET forks = forks + 1 WHERE id = ?'),
          published: db.prepare('UPDATE space_apps SET site_id = ?, published_at = ?, updated_at = ? WHERE id = ?'),
          unpublished: db.prepare('UPDATE space_apps SET site_id = NULL, published_at = NULL, updated_at = ? WHERE id = ?'),
--        remove: db.prepare("UPDATE space_apps SET status = 'deleted', site_id = NULL, deleted_at = ?, updated_at = ? WHERE id = ?"),
++        // Deleting is for good: its files, lists, everyone's private storage and sign-ins in it go too (ON DELETE CASCADE).
++        remove: db.prepare('DELETE FROM space_apps WHERE id = ?'),
          project: db.prepare('SELECT project_id FROM space_app_projects WHERE owner_subject = ?'),
          addProject: db.prepare('INSERT INTO space_app_projects (owner_subject, project_id, created_at) VALUES (?, ?, ?) ON CONFLICT (owner_subject) DO NOTHING'),
          gallery: db.prepare(`SELECT * FROM space_apps WHERE status = 'active' AND site_id IS NOT NULL AND visibility = 'public'
@@@ -257,8 +258,7 @@ function createSpaces({ store, config, projects, sites, deploys, takedowns, log
  
      async function remove(viewer, space) {
          if (space.site_id) await unpublish(viewer, space);
--        const now = store.now();
--        await q.remove.run(now, now, space.id);
++        await q.remove.run(space.id);
      }
  
      async function gallery({ q: query = '', sort = 'new', limit = 48 } = {}) {
ddiff --git a/test/spaces.test.js b/test/spaces.test.js
iindex 0bb6983..5dad38f 100644
---- a/test/spaces.test.js
++++ b/test/spaces.test.js
@@@ -266,6 +266,10 @@ function fakeAi() {
          assert.strictEqual((await t.api('GET', `/spaces/${slug}`, { session: bob })).status, 404, 'a draft again');
          await edit(alice, 'POST', `/spaces/${slug}/delete`);
          assert.strictEqual((await t.api('GET', `/spaces/${slug}`, { session: alice })).status, 404);
++        for (const table of ['space_apps', 'space_app_files', 'space_app_items', 'space_app_kv', 'space_app_grants']) {
++            const n = (await t.ctx.store.db.prepare(`SELECT count(*) AS n FROM ${table} WHERE ${table === 'space_apps' ? 'id' : 'space_id'} = ?`).get(space.id)).n;
++            assert.strictEqual(Number(n), 0, `${table}: deleting is for good`);
++        }
      });
  
      await t.close();