Add admin endpoints and UI for deleting and expunging user accounts

[ml-evs]

Closes #478 by:

• adding a DELETE /users/<user_id> endpoint that lets admins delete an account
• if the account is not verified and has no items related to it, the user entry is entirely deleted from the db
• if the account is active/deactivated and has entries, the account is pseudonymised (given random name, connected accounts removed).

This PR also:

• fixes up AGENTS.md with a reference to the correct pydantic version
• orders the /users/ endpoint by date created with newest first by default

[codecov]

Codecov Report

❌ Patch coverage is 95.55556% with 4 lines in your changes missing coverage. Please review.
✅ Project coverage is 82.62%. Comparing base (5c9fab0) to head (82c4884).

Files with missing lines	Patch %	Lines
pydatalab/src/pydatalab/routes/v0_1/admin.py	94.11%	3 Missing ⚠️
pydatalab/src/pydatalab/login.py	50.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2158      +/-   ##
==========================================
+ Coverage   82.48%   82.62%   +0.14%     
==========================================
  Files          91       91              
  Lines        8782     8860      +78     
==========================================
+ Hits         7244     7321      +77     
- Misses       1538     1539       +1     

Files with missing lines	Coverage Δ
pydatalab/src/pydatalab/models/people.py	92.64% <100.00%> (+1.65%)	⬆️
pydatalab/src/pydatalab/models/traits.py	94.57% <100.00%> (ø)
pydatalab/src/pydatalab/routes/v0_1/collections.py	79.16% <100.00%> (+0.09%)	⬆️
pydatalab/src/pydatalab/routes/v0_1/items.py	86.84% <100.00%> (+0.01%)	⬆️
pydatalab/src/pydatalab/routes/v0_1/users.py	79.80% <100.00%> (+0.80%)	⬆️
pydatalab/src/pydatalab/login.py	88.15% <50.00%> (+3.02%)	⬆️
pydatalab/src/pydatalab/routes/v0_1/admin.py	78.80% <94.11%> (+3.19%)	⬆️

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[cypress]

datalab    Run #6199

Run Properties:   Passed #6199  •  8b382b085b ℹ️: Merge 82c48848c40391202ea2c93d478764994620eb83 into 5c9fab09d68669a58dd7e5ec0de4...

Project	datalab
Branch Review	ml-evs/tombstone-user-accounts
Run status	Passed #6199
Run duration	04m 50s
Commit	8b382b085b ℹ️: Merge 82c48848c40391202ea2c93d478764994620eb83 into 5c9fab09d68669a58dd7e5ec0de4...
Committer	Matthew Evans
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	0
Skipped	0
Passing	275
View all changes introduced in this branch ↗︎

[davidwaroquiers]

Happy to review this if you want @ml-evs. Just assign me in case.

[ml-evs]

Happy to review this if you want @ml-evs. Just assign me in case.

Sure, I think this is now safe after the XSS fixes which sanitize display names, but I'll also double check myself.

[davidwaroquiers]

Hi @ml-evs

Very nice work and useful in general thx! I left a couple of comments, some are "cosmetic" (not in the UI/UX sense), some I think are worth checking/addressing.