Account states: cancel, freeze, ban

Govern risky or departing accounts with clear states.

• Cancel: end the account lifecycle per process.
• Freeze: temporarily restrict; reversible.
• Ban: block access; banned accounts still occupy seats.