DPC-3995 Block Access on Verification Failure

[jdettmannnava]

🎫 Ticket

https://jira.cms.gov/browse/DPC-3995

🛠 Changes

• Created IconComponent and AccessDeniedComponent
• OrganizationCardComponent: shows status; uses link instead of organization
• OrganizationListComponent: sends links to OrganizationCard; removed search; adds AO header
• ApplicationController: shared before_hooks for access control
• ClientTokenController, IpAddressController, PublicKeyController, OrganizationController: uses shared before_hooks for access control
• User: returns links instead of organizations to support card component
• CdOrgLink: added verification_status to quack like duck
• AoLoadingComponent removed as no longer used

ℹ️ Context for reviewers

The weekly verification check may remove access to the portal for CDs and AOs due to various verification failures. The changes in the ticket block access under these conditions and explain why they are blocked. We do not have CD-specific messaging at this point.

✅ Acceptance Validation

Manual and automated testing:

AO

AO with med sanctions

Org has med sanctions

Org does not have approval

User no longer AO

CD

All Good

Org has med sanctions

Org does not have approval

🔒 Security Implications

• This PR adds a new software dependency or dependencies.
• This PR modifies or invalidates one or more of our security controls.
• This PR stores or transmits data that was not stored or transmitted before.
• This PR requires additional review of its security implications for other reasons.

If any security implications apply, add Jason Ashbaugh (GitHub username: StewGoin) as a reviewer and do not merge this PR without his approval.

[MEspositoE14s]

I'm far from a Rails expert, but from a 1,000ft level it seems good to me!