config-mod: allow disabling subordinate ID integration
    
    When full 32-bit ID range usage is required, subordinate ID support have
    to be disabled. However, even if ID range for subordinate IDs were to be
    removed, it will be restored during the next data upgrade.
    
    Change upgrade code to only apply subID range creation when subID
    support is enabled.
    
    Do not allow allocating subIDs if their use is disabled.
    
    Allow full 32-bit uidNumber/gidNumber values in JSON payload.
    
    Fixes: https://pagure.io/freeipa/issue/9757
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>