Anonymize handling workflow

[aatkin]

relates #3130

Add new option :anonymize-handling to workflow. When enabled, handling users are anonymized for applying users in:

• application events and attachments
• event emails.

Anonymized user is replaced with "rems-handler" and name/email is set to nil. Other attributes are omitted.

Events contain :event/actor (userid) and :event/actor-attributes, attachments contain :attachment/user. Certain event emails to applying users contain event actor that may be a handling user.

Anonymized userid can be localized in user interface and event emails with :t.roles/anonymized-handler, which uses :t.roles/handler. For example the english default translation is "Handler", and can be safely overridden in extra translations without overriding :t.roles/handler.

Other notable changes:

• rems.application.model/censor-user now returns only [:userid :name :email] instead of [:userid :name :email :organizations :notification-email]
• updated lambdaisland/kaocha to 1.86.1355 (originally thought something was broken with earlier version, but was actually a case of PEBKAC. however newer version did not break anything so updated anyway)
• workflow type field now has label in admin page.

Checklist for author

Remove items that aren't applicable, check items that are done.

Reviewability

• Link to issue
• Consider adding screenshots for ease of review

Backwards compatibility

• API is backwards compatible
• Feature appears correctly in PDF print

Documentation

• Update changelog if necessary
• Update manual/ (if applicable) (owner manual perhaps?) Check manual #3197

Testing

• Complex logic is unit tested
• Valuable features are integration / browser / acceptance tested automatically

Screenshots

Admin

Application as handler

PDF as handler

Application as applicant

PDF as applicant

[Macroz]

Based on our review together looks good 👍