Inventory: Create account that can be locked or unlocked

## User Story

In order to better manage user accounts that are locked or unlocked, Data.gov PO wants to be able to lock and unlock user accounts in inventory.data.gov such that their access to the system is opened or removed.

## Acceptance Criteria

[ACs should be clearly demoable/verifiable whenever possible. Try specifying them using [BDD](https://en.wikipedia.org/wiki/Behavior-driven_development#Behavioral_specifications).]

- [ ] GIVEN a user account is unlocked or locked \
and that status should be switched \
WHEN the account timeout expires (see this ticket) or when admin user manually clicks lock/unlock \
THEN their account unlock/lock status switches \

## Background

[Any helpful contextual notes or links to artifacts/evidence, if needed]

## Security Considerations ([required](https://nvd.nist.gov/800-53/Rev4/control/CM-4))

[comment]: # "Our SSP says 'The Data.gov team ensures security implications are considered as part of the agile requirements refinement process by including a section in the issue template used as a basis for new work.' so please don't remove this section without care."
[Any security concerns that might be implicated in the change. "None" is OK, just be explicit here!]

Please see @sanason and @jpyuda for security implications.