German spies violated law, must delete XKeyscore database—watchdog