Normalize nuclear delete bearer tokens

[aiirvizionz]

Summary

• normalize nuclear delete Authorization bearer parsing with case-insensitive scheme and flexible spacing
• trim extracted bearer tokens before Supabase auth lookup
• add focused regression coverage for spaced/case-insensitive bearer headers and empty bearer cookie fallback

Tests

• .\node_modules.bin\vitest.CMD run src\app\api\user\nuclear-delete\route.test.js
• node --check src\app\api\user\nuclear-delete\route.js
• node --check src\app\api\user\nuclear-delete\route.test.js
• git diff --check