Get Membership Status

Polled by /awaiting-approval to detect approval state changes.

This route is in the PENDING_ALLOWLIST so pending users can call it while waiting. Returns the live status from the DB (not the cached JWT) so a freshly-approved user's next poll flips to 'active'.