* better ordering of search results

* explicit ordering

Add support for binning of nested queries

This commit stores fingerprints and special type information for the
results of cards that have native queries, similar to what we store
for MBQL queries.

Collection layout tweaks

Fix a few borken doc links 

Horizontal Scalability: invalidate Settings cache when appropriate

Prevent google and ldap users from changing their email address

Encrypt Settings 

Google and LDAP users shouldn't be able to change their own email
addresses as we get that from the source.

Change the Pulse API to accept a CardRef or HybridPulseCard

We should not be storing/update passwords for LDAP users

Previously when an LDAP-based account was first created, the password
was encrypted and stored. Also the password was updated after each
successful LDAP login. This commit no longer does that and just stores
a randomly generated password (similar to what we do for Google auth).

Fixes #7635