reference has two meanings (now that it lost the "login" meaning):
- technical user identifier
- regular ERP5 document reference
This change moves the former to the new "user_id" property.
The latter remains in the "reference" property.

This adds a new portal type category, "login", and corresponding
getPortalLoginTypeList portal-level getter.

Now that a user can have multiple logins, create_user_action becomes
always available.

In addition to ERP5 Login-based authentication and enumeration support,
reserve special Zope users.

And simplify.

patches/DCWorkflow: use 'user/getIdOrUserName' as workflow actor expression instead of 'user/getUserName'.

so that ID is used for ERP5 user case, that should never change, and User Name is used for system users
like Anonymous User or System Processes, without changing all workflow definitions.

so that getId() is used for ERP5 users and getUserName() is used for special users
like Anonyous User or System Processes whose id is None.

To prepare for moving user id to a different property.
Mostly replacing getReference on Persons with Person_getUserId, and
catalog searches with PAS API when it is meant to search for a user and
not really a person by reference.

Because unit tests were used to choosing a login and setting a password,
making them use such method seems easier than adapting them to use the
existing "login" method, which really works by user id and not by login.

use getId() instead of getUserName() where user is supposed to be neither Anonyous User nor System Processes.

Verify there is a single line per use.
Test summary lines on per-category level.
Always compare use by uid available on lines, not by fetching a random
document on each aggregate line.

Facilitates pinpointing faulty related key declarations.

Also by default this user will have random password

Should improve indexation performance ever so slightly.

Also, stop passing ignored "spec" parameter.

Drop overly descriptive comments.
Simplify code.
Fix coding style.

Backward compatibility was not implemented everywhere, and it is masking
bugs: not all parameters were provided to these ZSQLMethods, which can
cause all sorts of bugs and performance issues because of DTML defaulting
to acquisition context for missing arguments. Drop this overcomplex code.

by adding Base_downloadWithCors that acts like Base_download but
adds CORS headers according to Base_prepareCorsResponse.