SPIKE: soft delete and permission migration during downgrade

While discussing we have identified that current approach of removing permission sets that have been explicitly removed from the ModuleDescriptor and dropping them from User/Permission objects may cause problems for downgrades.

A potential mitigation approach is to perform a "soft" delete during upgrade: mark the permission sets are "removed" and "hide" the User/Permission associations. On downgrade, restore these associations.

See https://folio-org.atlassian.net/wiki/display/DD/Migration+of+Static+Permissions+Upon+Upgrade