feat(auth): block disabled user accounts at the subscription guard

RequireActiveTenantSubscription now optionally takes an AuthRepository
and rejects the request with 40311/user_disabled when the actor's user
row is anything other than active. Wire the repo through the tenant
router, surface the new error code in admin-web's
membershipBlockedErrors set, persist a "disabled" membership status when
markStoredMembershipBlocked sees user_disabled, and add localized copy
on the blocked screen and shell membership banner.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apps/admin-web/src/i18n/messages/en-US.ts

@@ -102,6 +102,8 @@ const enUS = {
     eyebrow: "Access Paused",
     title: "This tenant plan is unavailable",
     expiredMessage: "Membership expired. Please renew or contact support.",
+    userDisabledMessage: "User has been disabled. Please contact support.",
+    reasonUserDisabled: "This user has been disabled. Business pages are now locked. Please contact support to restore access.",
     reasonTrialExpired: "The free trial's 3-day page access window has ended. All business pages are now locked. Please contact an administrator to reactivate trial access.",
     reasonRequired: "This tenant does not have an active plan. All business pages are now locked. Please contact an administrator.",
     reasonInactive: "This tenant plan has expired or been disabled. All business pages are now locked. Please contact an administrator to restore access.",

apps/admin-web/src/i18n/messages/zh-CN.ts

@@ -102,6 +102,8 @@ const zhCN = {
     eyebrow: "访问已暂停",
     title: "当前租户套餐不可用",
     expiredMessage: "会员到期，请充值或联系客服",
+    userDisabledMessage: "用户被停用，请联系客服",
+    reasonUserDisabled: "用户已被停用，业务页面已全部关闭，请联系客服恢复访问。",
     reasonTrialExpired: "免费试用的 3 天页面可访问期已经结束，当前业务页面已全部关闭，请联系管理员重新开通试用权限。",
     reasonRequired: "当前租户尚未开通有效套餐，业务页面已全部关闭，请联系管理员处理。",
     reasonInactive: "当前租户套餐已失效或已停用，业务页面已全部关闭，请联系管理员恢复访问。",