Import upstream v0.16.24, stripped

Upstream commit: af37a234981722493b74623a983581691d2b70b6
Enterprise-only files removed or emptied: 63
Enterprise-only snippets removed: 118 in 50 files
Dangling module declarations removed: 5
Edits turning enterprise off: 25
Third-party code: 14 files, 0 not in THIRD-PARTY.md
Renamed identifiers: 62 in 18 files
Verification: clean

The same Enterprise footprint as v0.16.23. The build check fails only on
tests/src/directory/issuer.rs, unchanged since v0.16.23: it calls a helper
from upstream's Enterprise-only OIDC test, and tests issuer-based directory
routing, an Enterprise feature. main has never carried it.

crates/store/src/backend/mysql/search.rs

@@ -9,7 +9,7 @@ use crate::{
         MAX_TOKEN_LENGTH,
         mysql::{
             DELETE_CHUNK_SIZE, MIN_DELETE_CHUNK_SIZE, MysqlSearchField, MysqlStore, into_error,
-            is_timeout_error,
+            is_chunk_too_large_error,
         },
     },
     search::{
@@ -109,14 +109,6 @@ impl MysqlStore {
         let params = build_filter(&mut query, &filter.filters);
 
         let mut conn = self.conn_pool.get_conn().await.map_err(into_error)?;
-        let s = conn.prep(&query).await.map_err(into_error)?;
-
-        match conn.exec_drop(s, params.clone()).await {
-            Ok(_) => return Ok(conn.affected_rows()),
-            Err(err) if is_timeout_error(&err) => (),
-            Err(err) => return Err(into_error(err)),
-        }
-
         let mut chunk_size = DELETE_CHUNK_SIZE;
         let mut deleted = 0;
 
@@ -130,12 +122,14 @@ impl MysqlStore {
                 match conn.exec_drop(&s, params.clone()).await {
                     Ok(_) => {
                         let affected = conn.affected_rows();
-                        if affected == 0 {
+                        deleted += affected;
+                        if affected < chunk_size as u64 {
                             return Ok(deleted);
                         }
-                        deleted += affected;
                     }
-                    Err(err) if is_timeout_error(&err) && chunk_size > MIN_DELETE_CHUNK_SIZE => {
+                    Err(err)
+                        if is_chunk_too_large_error(&err) && chunk_size > MIN_DELETE_CHUNK_SIZE =>
+                    {
                         chunk_size = (chunk_size / 2).max(MIN_DELETE_CHUNK_SIZE);
                         break;
                     }