Revoke access tokens for currently suspended users

We've updated our user suspension logic to revoke all of a user's access
tokens. This migration backfills that fix for existing, currently
suspended users. This is important because tokens can have long TTLs

db/migrate/20230816164936_revoke_access_tokens_for_suspended_users.rb

@@ -0,0 +1,8 @@
+class RevokeAccessTokensForSuspendedUsers < ActiveRecord::Migration[7.0]
+  def up
+    User.with_status(User::USER_STATUS_SUSPENDED)
+      .find_each(&:revoke_all_authorisations)
+  end
+
+  def down; end
+end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[7.0].define(version: 2023_08_04_094159) do
+ActiveRecord::Schema[7.0].define(version: 2023_08_16_164936) do
   create_table "batch_invitation_application_permissions", id: :integer, charset: "utf8mb3", force: :cascade do |t|
     t.integer "batch_invitation_id", null: false
     t.integer "supported_permission_id", null: false