Allow users to anonymize themselves

In non-strict mode, the staff action logs record the former username of the anonymized user.

(This is explicitly allowed under the GDPR as long as the records of the deletion request are only used to ensure you properly complied with the deletion request.)