Signing an ICLA triggers a background job to reevaluate that user's PRs
Redesign annotation to work with Pull Requests

We now have Pull Requests, which have many Pull Request Updates, and
which belong to Repositories. Instead of working directly with the
Updates, our annotation model works with Pull Requests. This will allow
us to reuse the annotation model when a User with pending Pull Requests
signs a CLA.