feat: api admin policies

api/app/Http/Controllers/UserController.php

@@ -184,4 +184,20 @@ class UserController extends Controller
 
         return response()->json($matches);
     }
+
+    public function block(User $user)
+    {
+        $user->blocked = true;
+        $user->save();
+
+        return response()->json(['message' => 'User blocked successfully']);
+    }
+
+    public function unblock(User $user)
+    {
+        $user->blocked = false;
+        $user->save();
+
+        return response()->json(['message' => 'User unblocked successfully']);
+    }
 }