🪦 fix: Omit Email From Account Deletion Log

[berry-13]

Summary

Self-service account deletion logged the deleted user's email at info level after the erasure cascade finished, so the erased identity stayed in application logs that the deletion never reaches. The log line now records only the opaque user id and tenant id.

First link of a stack of compliance fixes (#16993 to #16999); each link is independent and reviewable on its own.

Type of change

• Bug fix

Testing

Tested environments/configuration:

• Log-line change only, no runtime config involved.

Automated tests:

• npx eslint and npx prettier --check on the changed file: clean.
• Not applicable beyond lint: no spec asserts this log text.

Screenshots / recordings

No user-facing change

Risk / compatibility

None.

Checklist

• I reviewed my own changes
• Relevant tests have been added or updated
• Existing relevant tests pass
• The change does not introduce new warnings or errors
• Required documentation PR: N/A

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-11T21:00:18.481689Z	007ccd8	New commits
🔒 Security Review	✅ Completed 2026-10-11T20:58:42.686122Z	e44bce7	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.