Certification Expiry Auto-Pause

This feature converts certification compliance from a manual, error-prone coordinator chore into a system guarantee, directly addressing HLF's explicit need: "ved utgått sertifikat forsvinner likepersonen fra lokallagets nettsider automatisk." It removes the risk of uncertified mentors being assigned to sensitive cases - a real exposure for organizations operating under regulatory scrutiny - and reduces administrative load on coordinators. The auto-pause also nudges mentors to renew proactively when paired with reminders, increasing renewal rates and keeping the active roster genuinely qualified. For tenants without formal certification (e.g. NHF), the feature is simply not enabled.

Implementation requires a scheduled background job (expiry scheduler infrastructure) that scans certificate records nightly and evaluates each against its valid-until date. On expiry the job invokes the same status transition path used by manual pause, ensuring identical downstream effects (notifications, capacity exclusion, audit log) and preserving the single source of truth. The auto-pause is distinguishable from manual pause in the audit log (reason = expired_certification) so coordinators can triage appropriately. Coupling to certification-training means this feature is only active when that module is enabled for the tenant. Re-activation goes through the standard Resume flow, which already checks certification validity.