authz: use `synced_at` column to fetch list of oldest users and repos

Created by: unknwon

This improves our background permissions rolling update heuristics to be not affected by incremental updates as side effects. Which also makes the update scheduling more predictably.