v0.31.0 — account lifecycle audits itself

Picks up laravel-id v0.64.0, where Accounts::suspend() and reactivate() take an actor and record the audit internally. The operator screen's own audit block is gone — an audit written at the call site is one a second caller can forget, and this screen was the only caller there had ever been.

Known cost, tracked rather than hidden: the package scopes that entry to the system chain (an account sits above the tenancy boundary, consistent with PlatformOperators), so an account's own activity view no longer shows its suspension. The test now asserts both halves so the gap cannot quietly disappear.