feat(project): 업무·프로젝트 삭제를 '만든 사람'만 허용 + 경고

- 서버: api_delete_task/api_delete_project 가 created_by 일치자만 허용
  (슈퍼관리자 예외, created_by 없는 과거 데이터는 관리자 허용). 403 반환.
- 클라이언트: 삭제 버튼 클릭 시 만든 사람이 아니면 경고창 후 중단
  (created_by 를 트리 삭제버튼·홈 카드·업무 객체로 전달)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

app/modules/project/templates/project/index.html

@@ -1,12 +1,14 @@
 {% extends "erp_base.html" %}
 
 {% block head_extra %}
-<link rel="stylesheet" href="/static/project.css?v=20260625u" />
+<link rel="stylesheet" href="/static/project.css?v=20260625v" />
 <link rel="stylesheet" href="/static/vendor/material-symbols/material-symbols.css" />
 {% endblock %}
 
 {% block content %}
-<div class="pj-wrap" data-is-admin="{{ 'true' if is_admin else 'false' }}">
+<div class="pj-wrap" data-is-admin="{{ 'true' if is_admin else 'false' }}"
+     data-is-super="{{ 'true' if user.is_super_admin else 'false' }}"
+     data-me="{{ user.email }}">
 
   <div class="pj-home">
     <!-- 프로젝트 목록 -->
@@ -50,7 +52,8 @@
              data-start="{{ p.start_date or '' }}"
              data-due="{{ p.due_date or '' }}"
              data-color="{{ p.color }}"
-             data-status="{{ p.status or 'active' }}">
+             data-status="{{ p.status or 'active' }}"
+             data-creator="{{ p.created_by or '' }}">
           <a class="pj-project-cardlink" href="/project/p/{{ p.id }}">
             <span class="pj-project-dot"></span>
             <div class="pj-project-body">
@@ -164,5 +167,5 @@
 <script>
   window.PJ_COLORS = {{ ["#4573d2","#37a3a3","#62a420","#e8a33d","#e8384f","#aa62e3","#f06a6a","#5a6772"] | tojson }};
 </script>
-<script src="/static/project.js?v=20260625u" defer></script>
+<script src="/static/project.js?v=20260625v" defer></script>
 {% endblock %}

app/modules/project/templates/project/project.html

@@ -1,7 +1,7 @@
 {% extends "erp_base.html" %}
 
 {% block head_extra %}
-<link rel="stylesheet" href="/static/project.css?v=20260625u" />
+<link rel="stylesheet" href="/static/project.css?v=20260625v" />
 <!-- 구글 머티리얼 심볼(담당자 아이콘 등) — self-host -->
 <link rel="stylesheet" href="/static/vendor/material-symbols/material-symbols.css" />
 <!-- 타임라인 vis-timeline — self-host -->
@@ -23,6 +23,7 @@
      data-project-id="{{ project.id }}"
      data-can-manage="{{ 'true' if can_manage else 'false' }}"
      data-is-admin="{{ 'true' if is_admin else 'false' }}"
+     data-is-super="{{ 'true' if user.is_super_admin else 'false' }}"
      data-me="{{ user.email }}">
 
   <div class="pj-layout">
@@ -53,7 +54,7 @@
               </a>
               {% if is_admin %}
               <span class="pj-tree-acts">
-                <button type="button" class="pj-icon-btn pj-tree-del" data-id="{{ p.id }}" data-name="{{ p.name }}" title="프로젝트 삭제">×</button>
+                <button type="button" class="pj-icon-btn pj-tree-del" data-id="{{ p.id }}" data-name="{{ p.name }}" data-creator="{{ p.created_by }}" title="프로젝트 삭제">×</button>
               </span>
               {% endif %}
             </div>
@@ -289,5 +290,5 @@
 </script>
 
 <script src="/static/vendor/vis-timeline/vis-timeline-graph2d.min.js"></script>
-<script src="/static/project.js?v=20260625u" defer></script>
+<script src="/static/project.js?v=20260625v" defer></script>
 {% endblock %}