Record suspend/unsuspend actions in the audit log

[Joe-Heffer-Shef]

Summary

Follow-up to #584 (account suspension / Right to Restriction), implemented in #607.

The suspend/unsuspend feature currently toggles User.is_active but does not record an audit trail of when the restriction was applied or lifted, or by whom. Issue #584 notes this is desirable but defers it, because a separate audit-log mechanism is still in flight.

Once the audit-log feature is merged, wire the suspension actions into it.

What to do

• In ConsoleSuspendUserView and ConsoleUnsuspendUserView (home/views/console.py), record an audit event when a user is suspended/unsuspended, capturing:
  • the subject user
  • the staff member who performed the action (request.user)
  • the timestamp
  • the action type (restriction applied / lifted)
• Optionally surface this history in the console user detail page.

References

• UK GDPR Article 18 (Right to Restriction of Processing)
• Right to Restriction: ability to suspend a user account without deleting data #584 (original feature)
• feat: suspend user accounts from the staff console (GDPR Art. 18) #607 (implementation PR)