dsdb: Rework kcc_deleted() into dsdb_garbage_collect_tombstones()