Allow admins to set auto-locking after inactive periods

[signebedi]

This implicates a broader question about whether account locking should also disable the use of the API. Do we want to have account locking also disable key use, or just limit access to the UI?

If we do want account locking to also prevent use of the API, then we probably want to add some logic to check for user active status here:

libreforms-fastapi/libreforms_fastapi/app/__init__.py

Line 447 in cfab586

def api_key_auth(x_api_key: str = Depends(X_API_KEY)):