Enhance soft-delete ("Suspend Tenant")

[loneil]

Right now I think the tenant delete is just setting the state to disabled. But that doesn't do all that much other than flag it.

We should, as part of this

• Delete any API keys associated with the Tenant (being super careful to only delete that tenant's key)