Ensure Downgraded Teams can't authenticate MQTT Clients

[hardillb]

part of #4474

Description

Adds checks for if the Team is suspended and that the team still has the teamBroker feature enabled.

Related Issue(s)

#4474

Checklist

• I have read the contribution guidelines
• Suitable unit/system level tests have been added and they pass
• Documentation has been updated
  • Upgrade instructions
  • Configuration details
  • Concepts
• Changes flowforge.yml?
  • Issue/PR raised on FlowFuse/helm to update ConfigMap Template
  • Issue/PR raised on FlowFuse/CloudProject to update values for Staging/Production

Labels

• Includes a DB migration? -> add the area:migration label

[codecov]

Codecov Report

Attention: Patch coverage is 80.00000% with 1 line in your changes missing coverage. Please review.

Project coverage is 78.78%. Comparing base (019af80) to head (e01bbc6).
Report is 45 commits behind head on main.

Files with missing lines	Patch %	Lines
forge/db/controllers/TeamBrokerClient.js	80.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4739      +/-   ##
==========================================
+ Coverage   78.73%   78.78%   +0.04%     
==========================================
  Files         311      311              
  Lines       14697    14753      +56     
  Branches     3363     3374      +11     
==========================================
+ Hits        11572    11623      +51     
- Misses       3125     3130       +5     

Flag	Coverage Δ
backend	78.78% <80.00%> (+0.04%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.