Delete vault group

Soft-deletes a vault group that no longer has any active vaults assigned. This operation is blocked when the group still contains vaults.