[backend] implement lastnotification pruning
[api] synchronize access to /lastnotifications
[webui,api] move the rdiff function from webui

to api to avoid duplicatin a rather huge function
[api] comments don't use sources
[ci] make the publisher problem easier to debug by testing it alone
[backend] post relsyncs to correct binary backend server
[backend] also use correct reposerver in getrelsync (basically unused)
[api] support new CVE-YYYY-NNNN* syntax as specified by mitre.org

http://cve.mitre.org/cve/identifiers/syntaxchange.html
[api] remove test that no longer makes sense

as the lastnotifications fetching is blocking now, we can't do it in
test cases unless we generate events in the backend
[api] continue refactoring BsRequestAction model
[api] remove one duplication in source controller
[api] groups can have an email adress now
[backend] support master dispatcher in dispatchprio get/put
[api] Better logs for Sphinx related tasks in clockworkd -l
[dist] add logging to clockworkd
[api] fix some problems noted in production

- the buildevent can even more payload
- the request events need a "The one who did it."
- avoid crash in request show with issues
[webui] make parameters optional for save_comments

I wonder why this was never hit by the test suite ;(
[webui] restore display of last declined request in rdiff
[backend] drop the inode number from the deltaid hash, it breaks if the tree is copied

The inode is good for internal stuff, but bad for deltas, as deltas
get published and a redone delta is newly signed and thus end up
different than the old delta.
Copy over the old delta if we have one to ease migration.
[webui] Implement reverse owner "search" on the users home page