Add support for purgeprotect

Upon Sitaram's suggestion, implement functionality that will
abort if too many repositories are marked as deleted. The
default setting is abort if at least 5% of all repos are
being purged.