Add active status field to access entries

Track whether an account is active (enabled) or disabled at the
source system. The field is nullable so existing entries without
this data remain valid.

- DB migration adds active BOOLEAN column to access_entries
- Coredata read/write/upsert/filter wiring for the new column
- Review engine propagates Active from source accounts
- GraphQL schema exposes active on AccessEntry and AccessEntryFilter
- MCP spec, types, and resolvers expose active and fix missing
  account_type filter that was wired in GraphQL but not MCP
- CLI list command adds --active filter flag and ACTIVE output column
- Console campaign detail table shows Active/Disabled status badge
- E2e and unit tests updated to cover the new field

Signed-off-by: Bryan Frimin <bryan@probo.com>

apps/console/src/pages/organizations/access-reviews/campaigns/CampaignDetailPage.tsx

@@ -162,6 +162,7 @@ export const campaignDetailPageQuery = graphql`
                 fullName
                 role
                 isAdmin
+                active
                 mfaStatus
                 accountType
                 lastLogin
@@ -670,6 +671,7 @@ function ScopeSourceCard({ source, isPendingActions }: { source: ScopeSource; is
                         <Th>{__("Email")}</Th>
                         <Th>{__("Role")}</Th>
                         <Th>{__("Admin")}</Th>
+                        <Th>{__("Status")}</Th>
                         <Th>{__("MFA")}</Th>
                         <Th>{__("Last login")}</Th>
                         <Th>{__("Flag")}</Th>
@@ -698,6 +700,15 @@ function ScopeSourceCard({ source, isPendingActions }: { source: ScopeSource; is
                           <Td>{edge.node.email || <NotAvailable />}</Td>
                           <Td>{edge.node.role || <NotAvailable />}</Td>
                           <Td>{edge.node.isAdmin ? __("Yes") : __("No")}</Td>
+                          <Td>
+                            {edge.node.active == null
+                              ? <NotAvailable />
+                              : (
+                                  <Badge variant={edge.node.active ? "success" : "danger"}>
+                                    {edge.node.active ? __("Active") : __("Disabled")}
+                                  </Badge>
+                                )}
+                          </Td>
                           <Td>
                             {edge.node.mfaStatus === "UNKNOWN"
                               ? <NotAvailable />