UpdateUserNameRequest (users.update, name only) and deleteAttachment (attachments.delete, id-only — same shape as every other simple delete in this API, not yet confirmed live) so the app can clean up the previous avatar attachment when replacing or removing it instead of leaking an orphaned blob in Outline's storage every time. 2 new tests, 65/65 passing.