To allow for private packages, we need users to migrate away from usernames with an @ symbol in it. We'll allow users to always update their username from their profile page.

We aren't doing any redirects. We'll show a message about how this will break profile links and private package links.

Updating a username should update private package slugs for that user.