feat: enable/disable account users and block disabled users on account routes

[premsgr]

feat: enable/disable account users and block disabled users on account routes

Tasks completed

• Add enableAccountUser and disableAccountUser handlers and expose them via account users controller routes.
• Add ensureUserEnabledForAccount pre-handler that returns 403 when the session user is disabled for the current account.
• Use ensureUserEnabledForAccount after verifySession() on account-scoped routes in account, accountInvitation, and accountUser controllers.
• Add disabled column support in accountUsers sqlFactory and accountUser types.
• Update accounts sqlFactory and myAccounts handler to respect disabled account users where applicable.
• Update config types for handler configuration.