Don't show deactivated accounts on "Confirmed as read" pages

As part of our compliance requirements we have pages that are required reading for the whole company and need to display that everyone in the company has read them.

Currently the list of people who need to confirm required reading as read includes deactivated accounts.

Example: https://handbook.hmn.md/working-here/security/

Screenshot:

The section indicating who has read and who is still to read the required reading pages should exclude deactivated accounts.

Start from the implementation behind the “Confirmed as read” section shown on the example security page and trace how its people list is assembled. Verify the result against the example page; done means deactivated accounts no longer appear among people who still need to read or confirm the page.

Written by the indexing model from the issue text.