Add two artisan commands to retire legacy client-side encrypted data:
- encryption:notify-removal queues a re-engagement/deletion warning to
every user who still has an encrypted transaction or account
(non-null *_iv columns), reusing SendUpdateEmailJob.
- encryption:delete-accounts soft-deletes and anonymizes those users
when they have not signed in within the grace window (--days, default 7),
sparing anyone who came back and never touching the demo account.
Both support --dry-run and --force and share the target query via the
FindsUsersWithLegacyEncryption concern.
ece5cd5d27