Fix some hacked imports

Move the content of the auth module to better locations

Remove deferred import

Rename vo module to vos

We are switching from using Deployment to DeploymentState as deployment
objects (aka what's send to the clients). This is much nicer and
should've been done this way since the beginning.

The changes also entail API changes for the client.

The problem is that we deploy Deployment, but questionnaire is bound to
a DeploymentState. To make this work (barely) I added the following
behaviour: Once a user PATCHs a DeploymentStates questionnaire the
DeploymentState is published by acting like it is a ServiceDeployment.
This works as long as the client just executes deployments (and does not
try to gain insight into the backend state by watching the incoming
Deployments)

I'm not happy with this hack.

Alongside other linting / minor changes.