feat: add functionality to list disabled AD accounts and update related API

scripts/verify-disabled-accounts.ps1

@@ -0,0 +1,15 @@
+# verify-disabled-accounts.ps1
+# Returns the total number of disabled user accounts in Active Directory.
+
+[CmdletBinding()]
+param()
+
+try {
+    $disabled = Get-ADUser -Filter { Enabled -eq $false } -ErrorAction Stop
+    $count = @($disabled).Count
+    Write-Output "Disabled accounts: $count"
+}
+catch {
+    Write-Error "Failed to query Active Directory: $_"
+    exit 1
+}