ensure inactive users cannot log in and restrict actions for non-admi…

[rajnandan1]

…n roles. Fixes #600

[Copilot]

Pull request overview

Closes issue #600 by tightening authorization checks in the management API and preventing deactivated users from authenticating or maintaining sessions, improving the security posture of Kener’s admin/manage surface.

Changes:

• Enforce AdminEditorCan role checks for updateMonitoringData (fixing member privilege escalation) and also for testTrigger / testMonitor.
• Block sign-in for deactivated users (is_active = 0) with a clear 403 response.
• Treat sessions for deactivated users as invalid by returning null from GetLoggedInSession.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
src/routes/(manage)/manage/api/+server.ts	Adds missing AdminEditorCan checks to protect sensitive manage actions from lower-privilege roles.
src/routes/(account)/account/signin/+page.server.ts	Prevents deactivated users from logging in.
src/lib/server/controllers/userController.ts	Invalidates sessions for deactivated users during cookie/session validation.