nickserv/vhost: update usercloak metadata on vhost removal

This is consistent with HostServ behaviour and records additional
possibly helpful information.
nickserv/{enforce,ghost}: respect frozen accounts

This further avoids allowing access of frozen accounts, most critically
in the case of the NickServ REGAIN command which would otherwise allow
logging in to a frozen account.