user:resync: efficient resync for created/deleted users

Summary:
Instead of going over all users, we query for incomplete
creations/deletions separately to only retrieve users that actually
require a resync.

The resync job is only triggered when requesting an individual user,
and from the db status everything already seems in order.

Differential Revision: https://git.kolab.org/D5040