Account suspensions and appeals

Changes since 1.50.0.

#New

• Account suspension (Orion Central → Suspensions). Staff can suspend any account with a reason. The suspended user is immediately treated as signed out on every page and API, is emailed the reason, and lands on a /suspended page explaining what happened.
• Appeals. Suspended users can submit an appeal (claim) from /suspended. Staff review appeals in Orion Central → Suspensions — with a staff note — and can lift the suspension, which restores access immediately.
• On the user profile. Each Central user page shows the account's suspension state with suspend and lift controls. Staff accounts can't be suspended, and staff can't suspend their own account.
• Recorded. Every suspension and appeal is kept with who acted and when, so the account's trust history stays visible.

#Notes

• Suspension emails come from the same no-reply address as other account email and point to the appeal page.
• Orion Collect (the ODK-based mobile app) is not covered by this release.