Restrict Anonymous user access to user profile pages

Updated summary

One problem with https://www.drupal.org/project/pages_restriction → is that it doesn't support wildcards. So we'd need:

/users/foo-bar|/redirect
/users/foo-baz|/redirect

We can't do

/users/*|/redirect

I also proposed this fix using a custom reference formatter to avoid modifying permissions https://github.com/MidCamp/midcamp/pull/491

Back a step… checking a few example pages:
- https://www.midcamp.org/2023/schedule/wednesday
- https://www.midcamp.org/2023/topic-proposal/ai-help-content-managers-tri...

I think these are are acceptance criteria:
- User profile pages (/user/whatever) are never viewable by anon
- User profiles should be visible to anon when displayed via entity reference (on Topic, Training, and maybe other content)
- (already existing) Topics can only be published by Organizer/Admin

I think those things will block the spam accounts from getting any of their content visible, because only admins will be able to publish content that displays content from the user profile.

Reviewed comments, reassigned to Avi to validate PR passes AC.

Updated status

Automatically closed - issue fixed for 2 weeks with no activity.