retire tommyc's ldap account

Requested by erin 8 months ago in legacy/trac#28769 (moved) but we dropped the ball on following through.

The sort of ldap disable where it gives a grace period before turning off the email address seems like a reasonable choice here.

And when this is done we can close legacy/trac#28769 (moved) too.