Orphaned active userRoles survive user soft-delete (hygiene)

Soft-deleting a users row does not cascade to userRoles — a deleted user's role rows keep deletedAt IS NULL indefinitely (found via elazarpimentel@gmail.com row 57ff1da5, soft-deleted 2026-07-04, userRoles still show admin/bedelia/reportes active). Confirmed non-exploitable by pm-pluto-cc: vUsers filters deletedAt IS NULL so getUserWithRolesByAuthId can't match the deleted row. Fix: either cascade the archive trigger to soft-delete userRoles on user deletion, or document the intentional non-cascade in pluto-commons Soft Deletes section. Low priority hygiene, not a live bug.