Soft-delete a namespace + free its rdid (site-admin)

Authenticate every request with Authorization: Bearer <token> — a JWT or API token.