Feature Request Title: Urgent Compliance Update: Separate "Transcript Deletion" from "Session Deletion" and Implement Multi-Step Safeguards to Prevent Accidental Destruction of Legal Medical Records

Currently, under the "Automatic Deletion" settings, the toggle for "Automatic Transcript Deletion" is placed directly adjacent to/back-to-back with "Automatic Session Deletion."

The "Session Deletion" setting permanently destroys the entire clinical file, including finalized progress notes, clinical summaries, and private notes. Because these two settings are visually linked and share the same timeframe selectors (Immediate, 24 Hours, 7 Days), there is an unacceptably high risk of a provider accidentally activating "Session Deletion" when they only intended to activate "Transcript Deletion."

Under state licensing board regulations (e.g., California BBS) and HIPAA, destroying finalized progress notes is a severe compliance violation that exposes clinicians to immediate license discipline and insurance recoupment. The current UI layout does not reflect the legal gravity of deleting a medical record.

Requested Features / Solutions:

• Complete Visual and Structural Separation:

  • Move the "Automatic Session Deletion" setting to a completely separate "Advanced" or "Danger Zone" tab, far away from the standard "Transcript Deletion" settings.
    

• Implement Mandatory Multi-Step Friction Warnings:

  • If a user attempts to toggle "Automatic Session Deletion" on, the platform must not allow a single-click activation.

  • It must trigger a prominent, high-level warning pop-up stating:

    "WARNING: You are about to enable the automatic, permanent destruction of your legal medical records (including progress notes and clinical summaries). This action cannot be undone and may violate state record-retention laws."

  • To finalize the activation, the user should be required to manually type the word "DELETE" and re-enter their account password.
    

• Default to "Off":

  • Ensure that "Session Deletion" is strictly opted-out by default, with clear, unmistakable visual indicators distinguishing it from simple transcript purging.