Function delete_service 

pub fn delete_service(
    service: &str,
    confirm: Option<&str>,
    _actor: Actor,
    pool: &State<DbPool>,
) -> Status

Permanently deletes a service and all of its tasks + log messages across every corpus — the destructive twin of register_service, closing the R-6 orphan hazard at the data layer (Service::destroy). Token-gated via the Actor guard (an unauthenticated wipe must not be possible — 401 without a valid token) and double-guarded: the caller must echo the service name via ?confirm=<service>. The magic init/import services are infrastructure and can never be deleted (403). Returns 204 on success, 400 if the confirmation doesn’t match, 403 for a protected service, 404 if unknown.