Upserting user permissions is strictly additive
Created by: pjlast
Alternative option that makes user-centric permissions syncing purely additive. This means that user-centric permissions syncing can be used to speed up the permissions syncing process, but it cannot take permissions away that repo-centric permissions syncing has granted.
Test plan
Updated unit tests