Update module pquerna/otp to v1.3.0

See merge request !14

Configure Renovate

See merge request !12

SizeLimit will trigger an LDAP error if there are too many results,
which is not what we expect.

Mailing lists have a slightly different concept of "ownership" and we
shouldn't automatically disable them.

Fixes issue #16.

Fixes issue #15.

Intermediate improvements to validation

See merge request !10

Required for fetching a specific resource in LDAP-aware validators.

In preparation of supporting validators that take into account the
identity of the requestor (as per issue #11).

This is part of the fix to issue ai3/accountadmin#17 and is
required for compatibility with existing DAV objects in our
legacy database.

Replace all password checks with calls to the auth-server

See merge request !9

Run a real auth-server daemon for testing, using the test LDAP server
for authentication.

And remove useless debug logging from actions_test.

Properly delegates authentication to the git.autistici.org/id/auth
server, removing all embedded password checks for both privileged
requests and account recovery.

The Auth object only captures the information we actually need and
use, and it's nicer not to spread SSO handling all over the place.

Do not log anything on encoding failures.

The user and all associated resources will have their status set to
'inactive'.

Fixes issue #12.

Fixes issue #10.