Have git.drupalcode.org manage secondary emails, replacing multiple_email module

www.drupal.org uses multiple_email module for associating commits to user accounts. This is GitLab’s responsibility now, we are effectively just syncing over the confirmed email addresses.

multiple_email does have some other functionality, for example, password resets can be sent to confirmed secondary email addresses. Our new login/SSO solution doesn’t support any of this functionality, #3262372: Cloud IAM / Keycloak openid connect integration. multiple_email would also conflict with the SSO stack, as it would also try to set the primary account email address. So multiple_email will have to be removed.

Using the GitLab UI for this will make it possible for people to delete their {name}@{Drupal uid}.no-reply.drupal.org address for making commits with an anonymous email address. GitLab has its own version of this functionality, {GitLab ID}-{name}@users.noreply.drupalcode.org. We can switch to using that, and discontinue use of the Drupal.org-specific functionality.

Changes

• Any functionality that multiple_email provided will be gone. For example, if you’re in a situation where you needed a password reset sent to a secondary email, you can email help@drupal.org instead.
• The GitLab primary email address will be your real email address, not the no-reply address. You will get notifications from GitLab, they can be configured at https://git.drupalcode.org/-/profile/notifications. We should review what notifications are sent, for new accounts in particular.

Tasks

• #3300810: Use GitLab-managed anonymous commit emails in UI Update Drupal.org UI to replace {name}@{Drupal uid}.no-reply.drupal.org with {GitLab ID}-{name}@users.noreply.drupalcode.org
• #3300811: Bulk update GitLab users to adjust emails Update GitLab integration to set everyone’s:
  • Primary email to their primary email on Drupal.org
  • Commit email to the GitLab private email (we can not unblock editing this directly, git.drupalcode.org/-/profile also allows editing various fields that should stay in sync with Drupal.org; so we default to privacy)
• #3300812: Remove multiple email syncing Update GitLab integration to remove email syncing

Deployment

1. Remove email integrity checks
2. Adjust load balancer rules to allow updating email addresses on git.drupalcode.org
3. drush pm-disable multiple_email
4. Make a backup
5. drush pm-uninstall multiple_email