feat(beo): add BEOClient.destroy(beo_id, reason) for TS SDK parity

[sirambrosio]

Summary

Matches the TypeScript SDK's BEOClient.destroy() so Python callers can also exercise LGPD Art. 18 / GDPR Art. 17 — right to erasure.

Flow:

1. Sign a canonical payload {function: "destroyBEO", beoId, nonce, timestamp_secs} with the BEO's Ed25519 private key.
2. POST /api/relayer/beo/destroy using the v2 API wire format — hex nonce + integer timestamp_secs (matches bsp-registry-api PR #14).
3. Return {destroyed_at, aptos_tx}.

beo_id accepts int or decimal string; internally normalized to the wire-format string (Move id is u64).

Files changed

• bsp_sdk/beo.py — destroy() method + _serialize_beo_id() / _now_secs() helpers. Typed union BeoId = int | str. get(beo_id: BeoId).
• tests/test_beo_destroy.py — 11 new tests:
  • id serialization (int, decimal string, negatives, hex rejection)
  • happy path — asserts canonical signed payload re-verifies locally under the signing key's public half
  • error paths — missing private_key, non-dict response, unsupported beo_id type
• CHANGELOG.md — unreleased entry.

Test plan

• python3 -m pytest tests/test_beo_destroy.py -v → 11 passed.
• Full suite: python3 -m pytest → 64 passed (53 existing + 11 new).
• Signature round-trip: destroy payload produced by SDK verifies under PyNaCl.

Notes

• destroy() is a destructive operation with no client-side retry — callers should wrap in their own error handling.
• Reason string (optional) is audit-logged by the API but does not hit Move.

🤖 Generated with Claude Code