feat: diable validators on removal

src/managers/ValidatorManager.sol

@@ -55,6 +55,9 @@ abstract contract ValidatorManager is IValidatorManager, Auth {
   function _removeModuleValidator(address validator) internal {
     _moduleValidatorsLinkedList().remove(validator);
 
+    validator.excessivelySafeCall(gasleft(), 0, abi.encodeWithSelector(IInitable.disable.selector));
+    (success); // silence unused local variable warning
+
     emit RemoveModuleValidator(validator);
   }
 

src/validators/WebAuthValidator.sol

@@ -29,11 +29,12 @@ contract WebAuthValidator is VerifierCaller, IModuleValidator {
     return _addValidationKey(key);
   }
 
+  // There's no mapping from account address to domains,
+  // so there's no way to just delete all the keys
+  // We can only disconnect the module from the account,
+  // re-linking it will allow any previous keys
   function disable() external {
-    // There's no mapping from account address to domains,
-    // so there's no way to just delete all the keys
-    // We can only disconnect the module from the account,
-    // re-linking it will allow any previous keys
+    require(false, "Cannot disable module without removing it from account");
   }
 
   function _addValidationKey(bytes memory key) internal returns (bool) {