FIX: down downgrade trust level if all requirements are met. (#25953)

Currently, the trust level method  is calculating trust level based on maximum value from:
- locked trust level
- group automatic trust level
- previously granted trust level by admin

https://github.com/discourse/discourse/blob/main/lib/trust_level.rb#L33

Let's say the user belongs to groups with automatic trust level 1 and in the meantime meets all criteria to get trust level 2.

Each time, a user is removed from a group with automatic trust_level 1, they will be downgraded to trust_level 1 and promoted to trust_level 2

120a2f70a9/lib/promotion.rb (L142)

This will cause duplicated promotion messages.

Therefore, we have to check if the user meets the criteria, before downgrading.

lib/promotion.rb

@@ -137,6 +137,9 @@ class Promotion
       TrustLevel.calculate(user, use_previous_trust_level: use_previous_trust_level) ||
         TrustLevel[0]
 
+    granted_trust_level = user.trust_level if granted_trust_level < user.trust_level &&
+      !can_downgrade_trust_level?(user)
+
     # TrustLevel.calculate always returns a value, however we added extra protection just
     # in case this changes
     user.update_column(:trust_level, TrustLevel[granted_trust_level])
@@ -153,4 +156,12 @@ class Promotion
       user.change_trust_level!(TrustLevel[2], log_action_for: performed_by || Discourse.system_user)
     end
   end
+
+  def self.can_downgrade_trust_level?(user)
+    return false if user.trust_level == TrustLevel[1] && tl1_met?(user)
+    return false if user.trust_level == TrustLevel[2] && tl2_met?(user)
+    return false if user.trust_level == TrustLevel[3] && tl3_met?(user)
+
+    true
+  end
 end