Package manager should use owner ID

[pbiggar]

Dark programs store calls to package manager functions using strings to represent the owner. But, if the owner changes their username, that will break. Worse, if the owner changes their username, and a new user takes the old username, there could be a security incident.

Instead, stored programs should call package manager functions using the owner's UUID. (Similarly, functions should be stored in programs as TLIDs, not function names, to make it easier to change the names).

[StachuDotNet]

redundant with another issue, but folded into #5243