invoice/ui: safer deletes