Entities - Short-term business access changes

To support the corporations launch and the migration of users and businesses from COLIN to the modern system, some access changes are being contemplated.

Ideas previously proposed:
1. Allow the account that provides access to also remove access.
2. If your account gained access via the 'Request Access' flow, then your account can't approve 'Request Access' requests (flawed)
3. Allow anyone to delete an API vendor affiliation? (limited benefit)
4. The oldest affiliation can remove the newer affiliations (must combine with instructions to remove your own affiliation when changing management)

Scott's designs:
https://www.figma.com/design/0SplRDVE6QBjJF3oRYAlb7/Access-Control--Copy-?node-id=4254-8&p=f&t=gA6d0jRCUFc2qS0u-0

Updated design (Aug 2026)
https://www.figma.com/design/hYr839ZPCXmPDQryyZoPmE/API-Affiliation?node-id=2105-2372&t=VNGZPffQD0lDpOMl-4