feat(SCT-895): implement new user flag for auditing activity

[chrishutchinson]

What
We're starting to implement the foundations of our audit logging functionality, which will allow us to:

• Classify the users we want to enable Audit Logging on (currently done via a new Google Group, eventually, this will likely be everyone)
• Pass data from the front end along to the back end to identify the current user, and whether auditing is enabled for that request (this will likely move to the backend once permissions and auth is handled on that side of the world)
• Store events / actions in the database for reporting (this work is being done in the .NET API)

This PR introduces:

• A new isAuditable flag on the user object
• A method for getting the data needed to pass along for auditing purposes
• A Implementation of that method on the getResident function which fetches a resident by ID
• Associated tests for the above

Why
SCT-895