Issue:
When a private Bitbucket repository (within a private workspace) is deleted, and a redirect URL is set during the deletion process, unauthenticated users visiting the original URL are shown a "Repository is deleted" message along with a redirect link. This behavior inadvertently discloses the previous existence of a private repository and can leak metadata such as the original repo URL and redirection target. This breaks expectations around the confidentiality of private repositories and workspaces.

Suggestion:
Update the behavior for deleted private repositories (especially within private workspaces) so that unauthenticated users receive a 404 - Repository Not Found error instead of any messaging or redirect. Redirect information should only be visible to authenticated users with access to the original repository. This will ensure that private repositories remain confidential and do not expose any existence or redirection metadata to the public.