#40524 fix: clean up OAuth tokens after user deactivation

Proposed changes (including videos or screenshots)

Issue(s)

https://rocketchat.atlassian.net/browse/VLN-384

Steps to test or reproduce

Further comments

Summary by CodeRabbit

• Bug Fixes
  • OAuth tokens are revoked when an account is deactivated or auto-deactivated for idleness; tokens and userinfo become invalid for inactive users.
• Tests
  • Added end-to-end tests validating token revocation for explicit deactivation and idle deactivation.
• Chores
  • Updated models/typings and server logic to remove OAuth tokens for deactivated users.