A production check found that canonically equivalent Unicode user names can be stored as different identities.

Fix `normalizeUsername` while preserving its public API and existing behavior.
Read the repository before editing, make the smallest justified change, run the
relevant tests, and report the changed files and commands you ran.

