Indirect badge IDs to give us more flexibility

Allow badges to have a different UUID than the user associated so that we can reuse badges and remotely disable badges

An ideal implementation would be to randomly assign a badge UUID (to limit predictability of what other badge UUIDs could be which would happen with a sequential scheme) and then have a mapping of user UUIDs to badge UUIDs