User Management & Access Expiry

[vivjd]

Goal:
Enable admins to manage volunteer accounts and handle expirations.

Tasks:

• GET /api/users – list and filter by role and activity
• PATCH /api/users/:id – update is_active and access_expires_at
• Add middleware to block expired users
• Optional scheduled job to deactivate expired users

Acceptance Criteria:

• Admins can edit and deactivate volunteers
• Expired users automatically lose access