Parent privacy controls

Retention, export, deletion

Uses the existing parent session (Bearer + family scope). Exports exclude media bytes, signed URLs, and credential material. Deletion removes child learning history and revokes that learner's devices; parent library media is retained.