Combine status and reason_for_inactivity

We can model inactive roles with a single attribute instead of two.
Mark validation methods private

Also move class/scope methods to the top of the list to make them easier
to spot