fix: sql function get_mining_source_credentials_for_user

[malek10xdev]

Resolves #2850 and fixes 6 bugs discovered during QA demo + 2 follow-up bugs from continued testing.

Summary

DB Migration

• supabase/migrations/20260619000000_delete_user_data_auth_uid.sql — new private.delete_user_data() function (parameterless, SECURITY DEFINER, uses auth.uid()) that delegates contact cleanup to private.delete_contacts(NULL, TRUE) and cleans all other user-owned tables. Preserves private.email_status as a shared enrichment cache.

Edge Function

• supabase/functions/delete-user/index.ts — now calls delete_user_data() via the authenticated user client (not admin) and keeps admin only for auth.admin.deleteUser().
• supabase/functions/_shared/mailing/email.ts — guards sendEmail when SMTP is not configured (local dev).
• supabase/functions/email-campaigns/deno.lock removed — local Supabase Edge Runtime doesn't support lockfile v5.

Frontend Fixes

• PassiveMiningDialog.vue — uses store refs for defaults, guards watcher with oldVal to prevent overwriting user toggle changes.
• ContactInformationSidebar.vue — toRaw(contact.value) before passing to cache, safety guards in skipDialog/allTags/watch(show).
• stores/contacts.ts — JSON.parse(JSON.stringify(...)) deep-clone in updateContactsCache, try/catch in syncContactsList and realtime callback.
• stores/filters.ts + filters-defaults.ts — new emailMissing toggle filter for "phone without email" contacts.
• MiningTable.vue — new ToggleSwitch for the email-missing filter with i18n.

Test plan

• deno test for delete-user edge function (5 tests pass)
• Frontend lint passes
• Local manual QA: delete user returns 200; passive mining toggle reflects user choice; no edge-function lockfile/SMTP errors
• QA deploy verification

Out of scope (handled separately)

• Frontend form "empty for a second" flicker during save (mitigated with computed guards; full fix tracked separately)
• Proxy object could not be cloned loop (mitigated with JSON deep-clone)

[github-actions]

Coverage Report

✅ Passed

Commit: d52ba0b

Summary

	Name	Stmts	Branch	Funcs	Lines
🟡	Total	44.6%	42.1%	51.4%	44.9%

All files

	Name	Stmts	Branch	Funcs	Lines
🔴	backend/src/controllers/mining.controller.ts	0%	0%	0%	0%
🟢	backend/src/services/extractors/engines/GoogleContactsExtractor.ts	94.7%	93.3%	100%	97.2%

No coverage changes

	Name	Stmts	Branch	Funcs	Lines
🔴	backend/src/controllers/mining.controller.ts	0%	0%	0%	0%
🟢	backend/src/services/extractors/engines/GoogleContactsExtractor.ts	94.7%	93.3%	100%	97.2%

Generated by Test Coverage Reporter for commit d52ba0b

[malek10xdev]

Ready for review. This PR now includes:

delete-user fix:

• New private.delete_user_data() migration using auth.uid() + SECURITY DEFINER
• Edge function calls RPC as authenticated user
• Tests pass (5/5)

Passive mining toggle fix:

• Google Contacts toggle now correctly sends false when disabled (was sending true)
• Initialized from store refs instead of hardcoded defaults
• Watcher guarded with oldVal to prevent overwriting user edits

Local dev edge function fixes:

• Removed incompatible email-campaigns/deno.lock (v5 not supported by local runtime)
• Added SMTP guard in sendEmail to skip when SMTP_HOST is unset/example

Other frontend fixes in this PR:

• Proxy cloning error in contacts cache (JSON deep-clone)
• New filter: phone without email
• Sidebar template safety guards