Add trust_level_locked column
FIX: Leader requirements weren't loading when visited directly
FEATURE: Allow admins to lock users from TL3 promotion/demotion

Also, update the display logic for the leader promotion screen to
account for the demotion grace period.
Change 24 hours to soon (it runs every 4 hours)
Display grace period note even if not below requirements
Also skip locked users in the job query
Fix wrong variable name
Rename 'leader' -> 'tl3'
Fix test failure
FEATURE: implement lock/unlock trust level mechanics
correct spec
fix messy merge