Expose inapp active flag through API (bug 1060518)

- Add to serializer
- Disable purchases of inactive products
- Add tests
No? I was just testing that it's editable through the API?