authz: `ReposIDsWithOldestPerms` breaks when repos are hard-deleted from repo table

Created by: unknwon

..., but still have rows in repo_permissions table.