logger: gracefully handle missing `request.user`

Might be the case early during request processing, i.e. auth
middleware has not yet added it.
setup: pin ImageKit to 2.0.2
importhacks: allow settings dir override with KEGBOT_SETTINGS_DIR env var.