avoiding race conditions in async cascade deletes for event‑sourced services

you've got an event‑sourced aggregate that emits a UserDeleted event, and several downstream services...