Do not rely on DataSourceId for UserAccessRequest, it does not match annotations, exports

[fm3]

Currently, we encode annotation ids and export ids in DataSourceId, to pass it around as payloads for UserAccessRequests. That doesn’t really make sense. A more generalized id type is needed, or some other design.