Send deletion checks to program managers before maintenance

Your deletion webhooks arrive unvetted, causing unintended org removals and audit gaps. Program managers get verification and an audit record so deletions are confirmed before the next maintenance window.